Korenix Jetwave

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Korenix Equipment: Jetwave Vulnerabilities: Command Injection, Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to gain full...

PT-2023-5279 · Tp Link · Tp-Link Archer C2 +2

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 version Archer C50US V2 160801 TP-Link Archer C20 version Archer C20 V1 150707 TP-Link Archer C2 version Archer C2 US V1 170228 Description: The issue is related to a buffer overflow in the Wi-Fi router's firmware when...

Debian: Security Advisory (DLA-3379-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3379-1] intel-microcode security update

Debian LTS Advisory DLA-3379-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 01, 2023 https://wiki.debian.org/LTS Package : intel-microcode Version : 3.20230214.1deb10u1 CVE ID : CVE-2022-21216 CVE-2022-21233 CVE-2022-33196 CVE-2022-33972 CVE-2022-38090 Debia...

DLA-3380-1 firmware-nonfree - security update

Bulletin has no description...

PT-2023-19066 · Cl4Nx · Cl4Nx

Name of the Vulnerable Software and Affected Versions: CL4NX printer versions prior to 1.13.3-u724 r2 Description: An authentication bypass issue in the web client interface of the CL4NX printer allows remote unauthenticated attackers to execute commands intended for valid and authenticated users...

CVE-2020-14140

When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability. This vulnerability is caused by the lack of access control policies on some API interfaces. Attackers can exploit this vulnerability to enter the background and execute...

Command injection

When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability. This vulnerability is caused by the lack of access control policies on some API interfaces. Attackers can exploit this vulnerability to enter the background and execute...

B&R Systems Diagnostics Manager

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: B&R Industrial Automation Equipment: Systems Diagnostics Manager SDM Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability...

Wago PFC200 Cloud Connectivity TimeoutUnconfirmed Command Injection (CVE-2019-5157)

An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. An attacker can inject OS commands into the TimeoutUnconfirmed parameter value contained in the Firmware Update command. This plug...

Hitachi Energy RTU500 series Improper Input Validation (CVE-2022-28613)

A vulnerability in the HCI Modbus TCP COMPONENT of Hitachi Energy RTU500 series CMU Firmware that is caused by the validation error in the length information carried in MBAP header allows an ATTACKER to reboot the device by sending a special crafted message. This issue affects: Hitachi Energy...

ZKTeco ZEM/ZMM 8.88 - Missing Authentication Vulnerability

Exploit Title: ZKTeco ZEM/ZMM 8.88 - Missing Authentication Exploit Author: RedTeam Pentesting GmbH CVE: CVE-2022-42953 Advisory: Missing Authentication in ZKTeco ZEM/ZMM Web Interface The ZKTeco time attendance device does not require authentication to use the web interface, exposing the databas...

ZKTeco ZEM/ZMM 8.88 - Missing Authentication

Exploit Title: ZKTeco ZEM/ZMM 8.88 - Missing Authentication Exploit Author: RedTeam Pentesting GmbH CVE: CVE-2022-42953 Advisory: Missing Authentication in ZKTeco ZEM/ZMM Web Interface The ZKTeco time attendance device does not require authentication to use the web interface, exposing the databas...

About the security content of Studio Display Firmware Update 16.4

About the security content of Studio Display Firmware Update 16.4 This document describes the security content of Studio Display Firmware Update 16.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

Security Bulletin: Vulnerability in RC4 stream cipher affects TS2900 (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects TS2900. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this vulnerability to...

PT-2023-17765 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btm ble read remote features complete function of btm ble gap.cc due to improper input validation. This could lead to local information...

Design/Logic Flaw

The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system...

CVE-2023-28610

The CVE-2023-28610 entry affects OMICRON StationGuard and StationScout prior to version 2.21. The flaw arises in the update process, where a modified firmware image can be supplied to remote-update functionality, allowing a remote attacker to gain root access to the system. According to the sourc...

CVE-2023-28610

The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system...

PT-2023-20688

Name of the Vulnerable Software and Affected Versions Samsung Baseband Modem Chipset for Exynos Modem 5123 Samsung Baseband Modem Chipset for Exynos Modem 5300 Samsung Baseband Modem Chipset for Exynos 980 Samsung Baseband Modem Chipset for Exynos 1080 Samsung Baseband Modem Chipset for Exynos Au...