CVE-2017-8237: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image...

Code injection

Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file...

CVE-2015-6531

Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file...

CVE-2015-6531

Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file...

CVE-2015-6531: Improper Control of Generation of Code

Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file...

PT-2017-7032

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Panorama VM Appliance versions prior to 6.0.1 Description The issue allows remote attackers to execute arbitrary Python code via a crafted firmware image file. Recommendations For versions prior to 6.0.1, update to version...

Google Nexus Synaptics Touchscreen Firmware Injection(CVE-2017-0433)

Products Nexus 6P Nexus 9 Android One Pixel Pixel XL Vulnerable Versions Verified on Nexus 9 6.0.1/MOB30W Verified on Nexus 9 7.0/NRD90M Technical Details Due to lenient SELinux and DAC policy, vulnerable Synaptics DSX touchscreen driver sysfs file entires are exposed to an attacker that executes...

CVE-2016-3152: Exposure of Sensitive Information to an Unauthorized Actor

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image...

Bellini/Supercook Wi-Fi Yumi SC200 Information Disclosure / Code Execution

Bellini/Supercook Wi-Fi Yumi SC200 - Multiple vulnerabilities Reported By: ================================== James McLean - Primary: james dot mclean at gmail dot com Secondary: labs at juicedigital dot net Device Overview: ================================== From...

PT-2016-4708

Name of the Vulnerable Software and Affected Versions Cisco Universal Small Cell devices versions R2.12 through R3.5 Description The issue allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an...

PT-2016-3501

Name of the Vulnerable Software and Affected Versions AVM FRITZ!OS versions prior to 6.30 Description The issue allows remote attackers to create symlinks or overwrite critical files, and consequently execute arbitrary code, via a crafted firmware image. This is possible because the firmware...

AVM FRITZ!Box: Arbitrary Code Execution Via Firmware Images

Advisory: AVM FRITZ!Box: Arbitrary Code Execution Through Manipulated Firmware Images The firmware upgrade process of the FRITZ!Box 7490 is flawed. Specially crafted firmware images can overwrite critical files. Arbitrary code can get executed if an attempt is made to install such a manipulated...

CVE-2015-6403

The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400...

CVE-2015-6403

The CVE-2015-6403 issue affects Cisco Small Business SPA30x, SPA50x, and SPA51x IP Phones (firmware 7.5.7). The root cause is inadequate file integrity checks during firmware image validation in the TFTP implementation, enabling a local attacker with shell access to load a Trojan horse image onto...

PT-2015-7228

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA30x, SPA50x, SPA51x phones version 7.5.7 Description The issue is related to the TFTP implementation, which fails to properly validate the integrity of firmware-image files. This allows local users with shell access to...

Multiple Cisco IP Phones Firmware Image Upload Vulnerability

A vulnerability in the TFTP implementation of the Cisco Small Business SPA30X and SPA50X IP Phones could allow an unauthenticated, local attacker to load arbitrary firmware images onto the affected device. The vulnerability is due to insufficient file integrity checks of the firmware image. An...

ZTE GPON F427 and possibly F460/F600 - authorization bypass and cleartext password storage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: ZTE GPON F427 and possibly F460/F600 - authorization bypass and cleartext password storage Author: Jerzy Patraszewski Date: 10 July 2015 Affected software : =================== ZTE GPON: F427 Version: V3.0 Firmware Image:...

ZTE GPON F427 Authorization Bypass / Cleartext Password Storage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: ZTE GPON F427 and possibly F460/F600 - authorization bypass and cleartext password storage Author: Jerzy Patraszewski Date: 10 July 2015 Affected software : =================== ZTE GPON: F427 Version: V3.0 Firmware Image:...

Rockwell Automation MicroLogix 1100 PLC < Series B FRN 13.0 Multiple Vulnerabilities

Binary data scadarockwellmicrologix1100plcdos470154.nbin...

Hard-coded accounts on multiple network cameras

Hard-coded accounts on multiple network cameras =============================================== ADVISORY INFORMATION Title: Hard-coded accounts on multiple network cameras Discovery date: 05/06/2013 Release date: 11/07/2013 Advisory URL: http://goo.gl/82Rlb Credits: Roberto Paleari...