Intel One Boot Flash Utility Security Vulnerability

The Intel One Boot Flash Utility is an Intel Corporation program for updating a system's BIOS, BMC, Sensor Data Recording SDR, Field-Replaceable Unit FRU, and Intel® Management Engine Intel® ME. Programs for the Intel® Management Engine Intel® ME. A security vulnerability exists in the Intel One...

PT-2023-6989 · Siemens · Scalance M812-1 +15

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions V7.2.2 RUGGEDCOM RM1224 LTE4G NAM versions V7.2.2 SCALANCE M804PB versions V7.2.2 SCALANCE M812-1 ADSL-Router versions V7.2.2 SCALANCE M816-1 ADSL-Router versions V7.2.2 SCALANCE M826-2 SHDSL-Router versions...

Intel® QAT Advisory

Summary: A potential security vulnerability in the Intel® QuickAssist Technology QAT software for linux may allow escalation of privilege and denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-32641 Description:...

PT-2023-23937 · Intel · Hdmi Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software versions prior to 1.79.1.1 Description: The issue is related to an unquoted search path in the HDMI firmware update tool software, which may allow an authenticate...

PT-2023-7005 · Schneider Electric · Schneider Electric Powerlogic Ion8650 +1

Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic ION8650, ION8800 affected versions not specified Description: A Download of Code Without Integrity Check issue exists, allowing modified firmware to be uploaded during a firmware update procedure initiated by an...

PT-2023-23940 · Intel · Intel Nuc Kit Nuc6I7Kyk Thunderbolt 3 Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool versions prior to 46 Description: The issue is related to an uncontrolled search path in the installation software of the IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update...

Intel® Server Board and Server System Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Server Board and Server System BIOS firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-34431 Description: Improper input...

Moderate: fwupd security update

The fwupd packages provide a service that allows session software to update device firmware. Security Fixes: fwupd: world readable password in /etc/fwupd/redfish.conf CVE-2022-3287 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

PT-2023-32301 · Hanwha Vision · Wave Server Application

Name of the Vulnerable Software and Affected Versions: Hanwha Vision Wave server application affected versions not specified Description: A flaw in the Wave server application allows for remote code execution during the installation of Wave on the camera device. The application is vulnerable to...

Johnson Controls Quantum HD Unity

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable Remotely/Low attack complexity Vendor : Johnson Controls Inc. Equipment : Quantum HD Unity Vulnerability : Active Debug Code 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized user to...

PT-2023-9505 · Cisco · Cisco Small Business Rv042G +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV042, RV042G, RV320, and RV325 Routers affected versions not specified Description: The issue is related to improper validation of user input in incoming HTTP packets, which could allow a remote attacker to cause an...

HPESBCR04547 rev.1 - HPE Cray EX425 Supercomputer Using AMD EPYC Processors, AMD-SB-7008, Cross-Process Information Leak (Zenbleed) Security Notice, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX425 Compute Blade - Prior to BIOS Version 1.7.2 HFP 24.3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-20593 |...

PT-2023-7252 · Zyxel · Zyxel Vpn +1

Name of the Vulnerable Software and Affected Versions: Zyxel USG FLEX series firmware versions 4.50 through 5.37 Zyxel VPN series firmware versions 4.30 through 5.37 Description: The issue is related to improper privilege management in the hotspot feature of the affected devices. This could allow...

FUJIFILM Business Innovation Corp. and Xerox Corporation MFPs export Address Books with insufficient encryption strength

Overview Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient CWE-1391. Kunal Thakrar and Ceri Coburn of Pen Test...

CVE-2022-3007

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

CVE-2022-3007

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

Information disclosure

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

CVE-2022-3007

CVE-2022-3007 – Syska SW100 Smartwatch vulnerability arises from an improper implementation/configuration of Nordic Device Firmware Update (DFU) used for OTA updates over Bluetooth Low Energy. An unauthenticated attacker can set arbitrary values via BLE, potentially allowing a firmware update, de...

CVE-2022-3007 Unauthorized Access Vulnerability in Syska SW100 Smartwatch

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

PT-2023-6771 · Zavio · Zavio B8220 +10

Name of the Vulnerable Software and Affected Versions: Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 version M2.1.6.05 Description: The issue is caused by stack-based overflows during the processing and parsing of certain fields in XML elements from...