4403 matches found
Dell Edge Gateway 缓冲区错误漏洞
Dell Edge Gateway is a series of intelligent gateway devices from Dell, Inc. It is designed to aggregate, protect, analyze and relay data from a variety of sensors and devices at the edge of the network. A buffer overflow vulnerability exists in Dell Edge Gateway BIOS versions 3200, 5200. The...
Dell Edge Gateway Security Vulnerability
Dell Edge Gateway is a series of intelligent gateway devices from Dell USA Inc. Designed to aggregate, protect, analyze, and relay data from various sensors and devices at the edge of the network. A security vulnerability exists in Dell Edge Gateway BIOS version 3200, 5200. An attacker exploiting...
CVE-2024-40750
Linksys Velop Pro 6E 1.0.8 MX62001.0.8.215731 and 7 1.0.10.215314 devices send cleartext Wi-Fi passwords over the public Internet during app-based installation...
Danfoss AK-SM800A Improper Authentication (CVE-2023-25913)
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. This plugin only works with Tenable.ot. Please visit...
CVE-2024-32754 Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information
Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information...
PT-2024-24827 · Johnson Controls · Kt1 +2
Name of the Vulnerable Software and Affected Versions: KT1, KT2, and KT400 controllers affected versions not specified Description: The issue concerns the broadcasting of sensitive information when the controller is in factory reset mode. Specifically, the controller broadcasts its MAC address,...
Johnson Controls Kantech KT1, KT2, KT400 Security Vulnerability
The Johnson Controls Kantech KT1 is an Ethernet-enabled single-door controller.The Johnson Controls Kantech KT2 is an Ethernet-enabled two-door controller.The Johnson Controls Kantech KT400 is an Ethernet-enabled four-door controller. The Johnson Controls Kantech KT400 is an Ethernet-enabled...
CVE-2024-39349
A vulnerability regarding buffer copy without checking size of input 'Classic Buffer Overflow' is found in the libjansson component and it does not affect the upstream library. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camer...
Unspecified Vulnerability in MOXA OnCell G3470A-LTE
MOXA OnCell G3470A-LTE is a series of cellular gateway/router from MOXA China. A security vulnerability exists in MOXA OnCell G3470A-LTE v1.7.7 and earlier firmware versions, which originates from accepting a format string from an external source as a parameter, and can be exploited by an attacke...
CVE-2024-36755
D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmware version or change the downloading URL via a man-in-the-middle attack...
CVE-2024-23767
An issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3. The HICP protocol allows unauthenticated changes to a device's network configurations...
Hanwha Vision NVR Remote Code Execution (CVE-2023-6116)
An attacker could inject arbitrary attack code by manipulating http url parameters. However, in order to succeed in the attack, the base address of the stack memory must be obtained. The default address depends on firmware version, configuration option information, and the attack is unlikely to...
Hanwha Vision NVR Remote Code Execution (CVE-2023-6095)
An attacker could inject arbitrary attack code by manipulating HTTP headers. However, in order to succeed in the attack, the base address of the stack memory must be obtained. The default address depends on firmware version, configuration option information, and the attack is unlikely to succeed...
CVE-2024-4640
OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds checking on buffer operations. An attacker could write past the boundaries of allocated buffer regions in memory, causing a program crash...
Moxa OnCell G3470A-LTE 安全漏洞
MOXA OnCell G3470A-LTE is a series of cellular gateway/router from MOXA China. A command injection vulnerability exists in the MOXA OnCell G3470A-LTE v1.7.7 and earlier firmware versions, which stems from the lack of a neutralization input in the IPSec configuration, and can be exploited by an...
PT-2024-4557 · Moxa · Oncell G3470A-Lte Series
Name of the Vulnerable Software and Affected Versions: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior Description: The issue is related to the use of uncontrolled format strings, which can be exploited by a remote attacker to cause a denial of service. An attacker could modify an...
PT-2024-4285 · Moxa · Oncell G3470A-Lte Series
Name of the Vulnerable Software and Affected Versions: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior Description: The issue is related to a lack of neutralized inputs in the web key upload function, allowing an attacker to modify intended commands sent to target functions. This coul...
CVE-2024-37626
A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...
CVE-2022-48769
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines Aditya reports 0 that his recent MacbookPro crashes in the firmware when using the variable services at runtime. The culprit appears to be a call to...