HP LaserJet Printers Multiple RCE (HPSBPI04007)

According to its model number and firmware revision, the remote HP LaserJet printer is affected by two remote code execution and elevation of privilege vulnerabilities when processing a PostScript print job. %NASLMINLEVEL 80900 C Tenable, inc. include'compat.inc'; if description scriptid216482;...

Out-of-bounds write vulnerability in FUJIFILM Business Innovation Corp. MFPs

Overview Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. contain an out-of-bounds vulnerability CWE-787, CVE-2024-45320 due to a flaw in verifying the length of data. Jia-Ju Bai, Rui-Nan Hu, Cheng Li, Dong Zhang, Yu-Chen Sun, Wen-Han Xu, Zhen-Yu Guan, and...

PT-2025-6734 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-Link DIR-859 router versions A3 1.05 and earlier Description: A vulnerability in the D-Link DIR-859 router permits unauthorized individuals to bypass authentication. An attacker can obtain a user name and password by forging a post request ...

PT-2025-6975 · Ubiquiti · Unifi Protect Cameras

Name of the Vulnerable Software and Affected Versions: UniFi Protect Cameras affected versions not specified Description: The issue is related to a lack of firmware update capability due to incorrect certificate validation in UniFi Protect Cameras. This could allow a remote attacker to gain full...

Multiple vulnerabilities in NEC Aterm series (NV25-003)

Overview Aterm series provided by NEC Corporation contains multiple vulnerabilities listed below. Stored Cross-site Scripting CWE-79 - CVE-2025-0354 Missing Authentication for Critical Function CWE-306 - CVE-2025-0355 OOS Command Injection CWE-78 - CVE-2025-0356 CVE-2025-0354, CVE-2025-0355...

kernel-firmware-all-20250206-1.1 on GA media (moderate)

kernel-firmware-all-20250206-1.1 on GA media Announcement ID: openSUSE-SU-2025:14804-1 Rating: moderate Cross-References: CVE-2017-13080 CVE-2017-5715 CVE-2019-9836 CVE-2021-26339 CVE-2021-26348 CVE-2021-26364 CVE-2021-26375 CVE-2021-33139 CVE-2021-46744 CVE-2023-20569 CVE-2023-20593 CVSS scores:...

JVN#65447879: Multiple vulnerabilities in NEC Aterm series (NV25-003)

Aterm series provided by NEC Corporation contains multiple vulnerabilities listed below. Stored Cross-site Scripting CWE-79 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N Base Score 4.8 CVE-2025-0354 Missing Authentication for Critical Function CWE-306 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers - Potential Remote Code Execution and Potential Elevation of Privilege

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job. Update your printer firmware...

linux-firmware bug fix update

An update is available for linux-firmware. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The linux-firmware packages contain all of the firmware files that are...

CVE-2025-26409

A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well as a Linux login prompt. The bootloader access can be used to gain a root shell on the device. This issue is fixed in...

kernel-firmware-bnx2-20250206-1.1 on GA media (moderate)

kernel-firmware-bnx2-20250206-1.1 on GA media Announcement ID: openSUSE-SU-2025:14775-1 Rating: moderate Cross-References: CVE-2017-13080 CVE-2017-5715 CVE-2019-9836 CVE-2021-26339 CVE-2021-26348 CVE-2021-26364 CVE-2021-26375 CVE-2021-33139 CVE-2021-46744 CVE-2023-20569 CVE-2023-20593 CVSS scores...

kernel-firmware-mwifiex-20250206-1.1 on GA media (moderate)

kernel-firmware-mwifiex-20250206-1.1 on GA media Announcement ID: openSUSE-SU-2025:14787-1 Rating: moderate Cross-References: CVE-2017-13080 CVE-2017-5715 CVE-2019-9836 CVE-2021-26339 CVE-2021-26348 CVE-2021-26364 CVE-2021-26375 CVE-2021-33139 CVE-2021-46744 CVE-2023-20569 CVE-2023-20593 CVSS...

kernel-firmware-serial-20250206-1.1 on GA media (moderate)

kernel-firmware-serial-20250206-1.1 on GA media Announcement ID: openSUSE-SU-2025:14797-1 Rating: moderate Cross-References: CVE-2017-13080 CVE-2017-5715 CVE-2019-9836 CVE-2021-26339 CVE-2021-26348 CVE-2021-26364 CVE-2021-26375 CVE-2021-33139 CVE-2021-46744 CVE-2023-20569 CVE-2023-20593 CVSS...

kernel-firmware-chelsio-20250206-1.1 on GA media (moderate)

kernel-firmware-chelsio-20250206-1.1 on GA media Announcement ID: openSUSE-SU-2025:14777-1 Rating: moderate Cross-References: CVE-2017-13080 CVE-2017-5715 CVE-2019-9836 CVE-2021-26339 CVE-2021-26348 CVE-2021-26364 CVE-2021-26375 CVE-2021-33139 CVE-2021-46744 CVE-2023-20569 CVE-2023-20593 CVSS...

CVE-2024-42492

The CVE-2024-42492 entry applies to the BIOS and System Firmware Update Package for IntelR Server M50FCP family prior to version R01.02.0002. The root cause is an uncontrolled search path element, which could allow a privileged user to escalate privileges via local access. Intel's advisory (INTEL...

CVE-2025-26410

The firmware of all Wattsense Bridge devices contain the same hard-coded user and root credentials. The user password can be easily recovered via password cracking attempts. The recovered credentials can be used to log into the device via the login shell that is exposed by the serial interface. T...

CVE-2025-26409

A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well as a Linux login prompt. The bootloader access can be used to gain a root shell on the device. This issue is fixed...

CVE-2025-26410

Wattsense Bridge firmware prior to 6.4.1 contains hard-coded user/root credentials; recovered passwords enable login via the serial interface, leading to total compromise. The backdoor user has been removed in firmware BSP >= 6.4.1. Recommended remediation: update Wattsense Bridge firmware to ...

CVE-2025-26409 Access to Bootloader and Shell Over Serial Interface

A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well as a Linux login prompt. The bootloader access can be used to gain a root shell on the device. This issue is fixed...

PT-2025-6175 · Wattsense · Wattsense Bridge

Name of the Vulnerable Software and Affected Versions: Wattsense Bridge versions prior to 6.1.0 Description: An authenticated attacker can use the Plugin Manager of the web interface to upload malicious Python files, enabling remote root access to the device. The attacker needs a valid user accou...