PT-2023-20688

Name of the Vulnerable Software and Affected Versions Samsung Baseband Modem Chipset for Exynos Modem 5123 Samsung Baseband Modem Chipset for Exynos Modem 5300 Samsung Baseband Modem Chipset for Exynos 980 Samsung Baseband Modem Chipset for Exynos 1080 Samsung Baseband Modem Chipset for Exynos Au...

Security Bulletin: NVIDIA DGX-2, DGX Station A100, and DGX A100 - March 2023

NVIDIA has released a firmware security update for the NVIDIA DGX-2™ server, DGX A100 server, and DGX Station A100. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, loss of data integrity, information disclosure, or data tampering. To...

TP-Link T2600G-28SQ uses vulnerable SSH host keys

Overview TP-Link layer-2 switch T2600G-28SQ uses vulnerable SSH host keys CWE-1391. Kuniyuki Hasegawa of VeriServe Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact The credential information for a...

Security Bulletin: Multiple Vulnerabilities in Intel Firmware affect Cloud Pak System

Summary Vulnerabilities in Intel firmware affect Cloud Pak System. Cloud Pak system nodes using Intel driver firmware recommended update. Vulnerability Details CVEID:CVE-2021-0197 DESCRIPTION: Intel Ethernet controllers are vulnerable to a denial of service, caused by a protection mechanism failu...

Dell PowerEdge Server BIOS 缓冲区错误漏洞

Dell PowerEdge Server BIOS is a system update driver for the Dell Dell from Dell Dell USA. A security vulnerability exists in the Dell PowerEdge Server BIOS that stems from an incorrect SMM communications buffer validation vulnerability...

PT-2023-2545 · Tp Link · Tp-Link T2600G-28Sq

Name of the Vulnerable Software and Affected Versions: TP-Link L2 switch T2600G-28SQ versions prior to T2600G-28SQUN V1 1.0.6 Build 20230227 Description: The issue is related to errors in handling SSH keys, which can allow a remote attacker to gain unauthorized access to protected information. A...

ThinkPad BIOS Vulnerabilities - Lenovo Support US

No description provided...

PT-2023-2025

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX21 versions prior to 1.1.4 Build 20230219 Description An unauthenticated attacker can execute arbitrary commands with root privileges on the web management interface via a command injection issue. The flaw exists because the...

Multiple vulnerabilities in SEIKO EPSON printers/network interface Web Config

Overview Web Config for printers/network interface provided by SEIKO EPSON CORPORATION contains multiple vulnerabilities listed below. Stored cross-site Scripting CWE-79 - CVE-2023-23572 Cross-Site Request Forgery CWE-352 - CVE-2023-27520 Takaya Noma, Yudai Morii, Hiroki Yasui, Takayuki Sasaki, a...

JVN#82424996: Multiple vulnerabilities in SEIKO EPSON printers/network interface Web Config

Web Config for printers/network interface provided by SEIKO EPSON CORPORATION contains multiple vulnerabilities listed below. Stored cross-site Scripting CWE-79 - CVE-2023-23572 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.8 CVSS v2|...

PT-2023-2117 · NetGear · Netgear Nighthawk Wifi6 Router

Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk WiFi6 Router versions prior to V1.0.10.94 Description: The issue is related to the file sharing mechanism in the NETGEAR Nighthawk WiFi6 Router, which allows users with access to this feature to access arbitrary files on the...

HPESBHF04407 rev.1 - Certain HPE Edgeline Servers using Certain Intel Processor, INTEL-SA-00738, 2023.1 IPU – Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920 Server Blade - Prior to 1.6602-02-2023 HPE Edgeline e920d Server Blade - Prior to 1.6602-02-2023 HPE Edgeline e920t Server Blade - Prior to 1.6602-02-2023 CVSS...

Nuvoton TPM Denial of Service Vulnerability - Lenovo Support US

No description provided...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2022-43902)

Summary IBM MQ Appliance has resolved a denial of service vulnerability. Vulnerability Details CVEID:CVE-2022-43902 DESCRIPTION: IBM MQ is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. CVSS Base score: 6.5 CVSS Temporal Score: See:...

Security Bulletin: This Power System update is being released to address CVE-2022-3435

Summary POWER10: In response to a security issue with ipv4 network connections, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2022-3435. Vulnerability Details CVEID:CVE-2022-3435 DESCRIPTION: Linux Kernel could allow a remote...

WAGO Series 750-88x and 750-87x Use of Hard-Coded Credentials (CVE-2019-10712)

The Web-GUI on WAGO Series 750-88x 750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889 and Series 750-87x 750-830, 750-849, 750-871, 750-872, 750-873 devices has undocumented service access. This plugin only works with Tenable.ot. Please visit...

PT-2023-13447 · Openbmc · Openbmc

Name of the Vulnerable Software and Affected Versions: OpenBMC versions prior to 0.72 Description: The issue is an out of bounds read in the firmware for OpenBMC in some Intel platforms, which may allow an unauthenticated user to potentially enable denial of service via network access...

Intel One Boot Flash Utility 安全漏洞

The Intel One Boot Flash Utility is an Intel Corporation program for updating a system's BIOS, BMC, Sensor Data Recording SDR, Field-Replaceable Unit FRU, and Intel® Management Engine Intel® ME. Programs for the Intel® Management Engine Intel® ME. A security vulnerability exists in the Intel One...

PT-2023-13005 · Intel · Intel Integrated Sensor Solution

Name of the Vulnerable Software and Affected Versions: IntelR Integrated Sensor Solution versions prior to 5.4.2.4579v3 IntelR Integrated Sensor Solution versions prior to 5.4.1.4479 IntelR Integrated Sensor Solution versions prior to 5.0.0.4143 Description: The issue is an out-of-bounds read in...

PT-2023-13480 · Intel · Intel Sps Firmware

Name of the Vulnerable Software and Affected Versions: Intel R SPS firmware versions prior to SPS E5 04.04.04.300.0 Description: The issue is related to active debug code in some Intel R SPS firmware, which may allow an authenticated user to potentially enable escalation of privilege via local...