PT-2024-10029

Name of the Vulnerable Software and Affected Versions Four-Faith routers F3x24 and F3x36 versions prior to 2.0 Description The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and...

Rockwell Automation PowerMonitor 1000 Classic Buffer Overflow (CVE-2024-12373)

A denial-of-service vulnerability exists in the affected product. The vulnerability results in a buffer overflow, potentially causing denial-of-service condition. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Rockwell Automation PowerMonitor 1000 Unprotected Alternate Channel (CVE-2024-12371)

A device takeover vulnerability exists in the affected product. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit operations, creating admin users and performing factory reset...

CLSA-2024-1734532539 Fix CVE(s): CVE-2022-38076

CVE-2022-38076 - linux-firmware: Update for Intel Dual Band Wireless AC 3168 - linux-firmware: Upadte for Intel Wireless 7265 Rev D Family - linux-firmware: Update for Intel Dual Band Wireless AC 3165 - linux-firmware: Update for Intel Dual Band Wireless AC 8265 - linux-firmware: Update for Intel...

CVE-2024-4762

An improper validation vulnerability was reported in the firmware update mechanism of LADM and LDCC that could allow a local attacker to escalate privileges...

CVE-2024-4762

CVE-2024-4762 affects Lenovo LADM and Lenovo LDCC firmware update mechanism. Root cause: improper validation in the firmware update process leading to local privilege escalation. Affected components: LADM and LDCC; impact is local confidentiality, integrity, and availability of high level (per CV...

CVE-2024-4762

An improper validation vulnerability was reported in the firmware update mechanism of LADM and LDCC that could allow a local attacker to escalate privileges...

CVE-2024-4762

An improper validation vulnerability was reported in the firmware update mechanism of LADM and LDCC that could allow a local attacker to escalate privileges...

Multiple vulnerabilities in FXC AE1021 and AE1021PE

Overview AE1021 and AE1021PE are information outlet type wireless LAN routers provided by FXC Inc. They contain multiple vulnerabilities listed below. Weak Authentication CWE-1390 - CVE-2024-47397 OS Command Injection CWE-78 - CVE-2024-53688 Inclusion of Undocumented Features CWE-1242 -...

Fedora: Security Advisory (FEDORA-2024-5f9b20882f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-1926

Name of the Vulnerable Software and Affected Versions Color imageCLASS MF656Cdw versions v05.04 and earlier Color imageCLASS MF654Cdw versions v05.04 and earlier Color imageCLASS MF653Cdw versions v05.04 and earlier Color imageCLASS MF652Cdw versions v05.04 and earlier Color imageCLASS LBP633Cdw...

Lenovo Display Control Center和Lenovo Accessories and Display Manager 安全漏洞

Lenovo Display Control Center LDCC and Lenovo Accessories and Display Manager LADM are both products of Lenovo, China.Lenovo Display Control Center is a software platform for Lenovo displays. Lenovo Accessories and Display Manager LADM are both products of Lenovo, China. Lenovo Display Control...

JVN#61635834: Multiple vulnerabilities in SHARP routers

SHARP routers contain multiple vulnerabilities listed below. OS command injection vulnerability in the HOST name configuration screen CWE-78 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base Score 7.2 CVE-2024-45721 The hidden debug function is enabled CWE-489...

CVE-2024-28146

The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device...

CVE-2024-28146

CVE-2024-28146 affects Image Access Scan2Net software. The issue arises from hard-coded credentials used to (1) encrypt configuration files during backups, (2) decrypt firmware during updates, and (3) passwords that allow a direct connection to the device’s database server. Public records from mu...

CVE-2024-52537

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

HPESBHF04754 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01111, UPLR2 - Intel ACTM Module Software Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20241129 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-22185 |...

HPESBHF04690 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01083, 2024.3 IPU - SMI Transfer Monitor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20241129 HPE SimpliVity 170r Gen10 Server - Prior to HPE SimpliVity Gen10 Support Pack SVTSP...

HPESBHF04755 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01085, UPLR2 - Intel UEFI Firmware Advisory, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20241129 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-25565 |...

HPESBHF04752 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01097 - Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20241129 HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20241129...