HPESBHF04795 rev.1 - Certain HPE SimpliVity AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7027: AMD System Management Mode (SMM) Vulnerabilities, Local Arbitrary Code Execution Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20250131 HPE SimpliVity 325 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v202501...

HPESBHF04782 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7027: AMD System Management Mode (SMM) Vulnerabilities, Local Arbitrary Code Execution Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to v1.3010-04-2024 HPE ProLiant DL325 Gen11 Server - Prior to v1.7009-06-2024 HPE ProLiant DL345 Gen11 Server - Prior to v1.7009-06-2024 HPE...

HPESBHF04800 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS, INTEL-SA-01213, 2025.1 IPU - Intel SGX Advisory, Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to v2.4401-17-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to v2.4401-17-2025 U63 ROM Family HPE StoreEasy 1570 Performance -...

PT-2025-6206 · Siemens · Simatic S7-1200 Cpu +1

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-1200 CPU versions prior to V4.7 SIPLUS S7-1200 CPU versions prior to V4.7 Description: A vulnerability has been identified in the affected devices, where they do not process correctly certain specially crafted packets sent to port...

HPESBHF04801 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS, INTEL-SA-01166, 2024.4 IPU, Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to v2.4401-17-2025 HPE StoreEasy 1470 Storage - Prior to v2.4401-17-2025 HPE StoreEasy 1570 Performance - Prior to v2.4401-17-2025 HPE...

HPESBHF04792 rev.1 - Certain HPE ProLiant DL/ML, Alletra, Edgeline and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01166, 2024.4 IPU, Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.4401-17-2025 HPE Alletra 4120 - Prior to v2.4401-17-2025 HPE Alletra 4140 - Prior to v2.4401-17-2025 HPE ProLiant DL110 Gen11 - Prior to...

PT-2025-6173 · Wattsense · Wattsense Bridge

Name of the Vulnerable Software and Affected Versions: Wattsense Bridge devices versions prior to BSP 6.4.1 Description: A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well...

PT-2025-6174 · Wattsense · Wattsense Bridge

Name of the Vulnerable Software and Affected Versions: Wattsense Bridge versions prior to 6.4.1 Description: The firmware of all Wattsense Bridge devices contains the same hard-coded user and root credentials. The user password can be easily recovered via password cracking attempts. The recovered...

Intel® Wireless Bluetooth® and Killer™ Bluetooth® Advisory

Summary: A potential security vulnerability in some Intel® Wireless Bluetooth® and Killer™ Bluetooth® products may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-37577 Non-Intel issued Description...

2025.1 IPU - Intel® SGX Advisory

Summary: A potential security vulnerability in some Intel® Software Guard Extensions Intel® SGX Platforms may allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-36293 Description: Improper access control i...

CVE-2023-5878

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

Canon Printers Multiple Vulnerabilities (CP2025-001)

Multiple vulnerabilities have been identified for certain Canon Small Office Multifunction Printers and Laser Printers. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2023-5878

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

CVE-2023-5878 OneWireless command injection possible when updating firmware

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

CVE-2023-5878

CVE-2023-5878 applies to Honeywell OneWireless Wireless Device Manager (WDM). Affected versions: R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, and R330.1. The vulnerability is a command injection that authenticated attackers can trigger via the firmware update process, leading to potential remo...

CVE-2023-5878 OneWireless command injection possible when updating firmware

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

Multiple vulnerabilities in STEALTHONE D220/D340/D440

Overview Network storage servers STEALTHONE D220/D340/D440 provided by Y'S corporation contain multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2025-20016 OS Command Injection CWE-78 - CVE-2025-20055 SQL Injection CWE-89 - CVE-2025-20620 Chuya Hayakawa and Ryo Kamino of...

CVE-2021-40419

A firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0.13620121102. A specially-crafted series of network requests can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-21134

A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2025-5827 · Honeywell · Honeywell Onewireless Wireless Device Manager

Name of the Vulnerable Software and Affected Versions: Honeywell OneWireless Wireless Device Manager WDM versions R310.x through R330.1 Description: The issue concerns a command injection vulnerability. An authenticated attacker could potentially exploit this vulnerability through the firmware...