CVE-2024-31747

An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 fixed in 122.15.0.142 allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option...

PT-2024-4602 · Asus · Asus Rt-N12+ B1

Name of the Vulnerable Software and Affected Versions: ASUS RT-N12+ B1 versions affected versions not specified ASUS RT-N12 D1 versions affected versions not specified Description: The issue is related to insufficient access control in the UART interface of the firmware of ASUS routers, allowing...

PT-2024-12410 · Qualcomm · 315 5G Iot Modem Firmware +107

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while processing a PDU Release command with a PDU ID parameter that is out of rang...

CVE-2023-52455 iommu: Don't reserve 0-length IOVA region

In the Linux kernel, the following vulnerability has been resolved: iommu: Don't reserve 0-length IOVA region When the bootloader/firmware doesn't setup the framebuffers, their address and size are 0 in "iommu-addresses" property. If IOVA region is reserved with 0 length, then it ends up corrupti...

PT-2024-1792 · Intel · Intel Server Platform Services

Name of the Vulnerable Software and Affected Versions: Intel Server Platform Services versions prior to SPS E5 06.01.04.002.0 Description: The issue is related to uncontrolled resource consumption in Intel Server Platform Services firmware, which may allow a privileged user to potentially enable...

CVE-2024-0244

Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.:Satera MF750C Series firmware v03.07 and earlier sold in Japan. Colo...

CVE-2023-6234

CVE-2023-6234 affects Canon Office/MFP and Laser Printers (e.g., Satera LBP670C, MF750C, Color imageCLASS LBP674C/X, i-SENSYS LBP673Cdw) via a Buffer Overflow in the CPCA Color LUT Resource Download process. Root cause: out-of-bounds/resource handling in the CPCA LUT download flow, allowing netwo...

CVE-2024-22028

Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data...

Design/Logic Flaw

Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data...

CVE-2024-22028

Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data...

PT-2023-21681 · Intel · Intel E810 Ethernet Controllers/Adapters

Name of the Vulnerable Software and Affected Versions: IntelR E810 Ethernet Controllers and Adapters versions prior to 1.7.1 Description: The issue is related to an out-of-bounds read in the firmware, which may allow an unauthenticated user to potentially enable denial of service via adjacent...

CVE-2023-46993

In TOTOLINK A3300R V17.0.0cu.557B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command injection...

PT-2023-22941 · Samsung · Galaxy Book +3

Name of the Vulnerable Software and Affected Versions: UEFI Firmware versions prior to Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360, and Galaxy Book Odyssey Description: The issue is related to improper input validation in UEFI Firmware, allowing a local attacker to execu...

TP-LINK TL-ER5120G 命令注入漏洞

The TP-LINK TL-ER5120G is a multi-WAN port Gigabit commercial router from China P&L TP-LINK. The TP-LINK TL-ER5120G suffers from a command execution vulnerability that stems from a rule name that fails to correctly filter constructed command special characters, commands, and so on. An attacker...

CVE-2023-39667

D-Link DIR-868L fwrevA1-12eumulti20170316 was discovered to contain a buffer overflow via the param2 parameter in the FUN0000acb4 function...

PT-2023-23913 · Intel · Intel Nuc Rugged Kit +2

Name of the Vulnerable Software and Affected Versions: IntelR NUC Rugged Kit, IntelR NUC Kit and IntelR Compute Element BIOS firmware affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware of certain Intel products, which may allow a...

PT-2023-18796 · Audiocodes · Audiocodes Voip Desk Phones

Name of the Vulnerable Software and Affected Versions: AudioCodes VoIP desk phones versions through 3.4.4.1000 Description: An issue was discovered where the validation of firmware images only consists of simple checksum checks for different firmware components. This allows an attacker, by knowin...

PT-2023-3866 · Unknown · Roc800-Series Rtu

Name of the Vulnerable Software and Affected Versions: ROC800-Series RTU devices affected versions not specified Description: The issue is related to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service...

Buffer overflow

Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. :Satera LBP660C Series/LBP620C Series/MF740C...

PT-2023-18420 · Intel · Intel Nuc Bios Firmware

Name of the Vulnerable Software and Affected Versions: IntelR NUC BIOS firmware affected versions not specified Description: The issue is related to improper access control in some IntelR NUC BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local...