Moderate: Red Hat Bug Fix Advisory: linux-firmware bug fix and enhancement update

An update for linux-firmware is now available for Red Hat Enterprise Linux 8. For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section...

Snap One OvrC Cloud (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Snap One Equipment: OvrC Cloud, OvrC Pro Devices Vulnerabilities: Improper Input Validation, Observable Response Discrepancy, Improper Access Control, Cleartext Transmission of Sensitive Information,...

Netgear Routers' Flaws Expose Users to Malware, Remote Attacks, and Surveillance

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution. "Successful exploits could allow attackers to monitor users' internet activity, hijack internet connections, and redirect traffic to...

Vulnerabilities in SICK FTMg

SICK found multiple security vulnerabilities in the SICK FTMg device. If exploited, these potentially allow a remote unauthenticated attacker to impact the availabiltiy or confidentaility of the FTMg device. Currently SICK is not aware of any public exploits specifically targeting any of the...

PT-2023-3477 · Wavlink · Wavlink Wl-Wn531Ax2

Name of the Vulnerable Software and Affected Versions: WAVLINK WL-WN531AX2 versions prior to 2023526 Description: The issue is related to client-side enforcement of server-side security, which may allow an attacker with administrative privilege to execute OS commands with the root privilege. This...

PT-2023-16564 · Canon · I-Sensys C1127I +14

Name of the Vulnerable Software and Affected Versions: Satera LBP660C Series versions 11.04 and earlier Satera LBP620C Series versions 11.04 and earlier Satera MF740C Series versions 11.04 and earlier Satera MF640C Series versions 11.04 and earlier Color imageCLASS LBP660C Series versions 11.04 a...

PT-2023-16566 · Canon · C1127If +13

Name of the Vulnerable Software and Affected Versions: Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series versions 11.04 and earlier Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C versions 11.04 and earlier i-SENSYS LBP660C...

CVE-2023-30356

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware...

CVE-2023-30356

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware...

CVE-2022-21162

Uncontrolled search path for the IntelR HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21162

Uncontrolled search path for the IntelR HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-40971

Incorrect default permissions for the IntelR HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21162

The CVE-2022-21162 case concerns the Intel(R) HDMI Firmware Update Tool for NUC prior to version 1.79.1.1. The root cause is an uncontrolled search path, which may allow an authenticated local user to escalate privileges. Affected product: Intel HDMI Firmware Update Tool for NUC. Impact: potentia...

CVE-2022-21162

Uncontrolled search path for the IntelR HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-30356

The CVE-2023-30356 issue affects Shenzen Tenda Technology IP Camera CP3, version V11.10.00.2211041355, where there is missing support for an integrity check. This allows an attacker to update the device with a crafted firmware image. Documents provide basic context but no exploit details or live ...

CVE-2023-30356

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware...

Intel HDMI Firmware Update Tool 代码问题漏洞

Intel HDMI Firmware Update Tool is a firmware update tool from Intel Corporation USA. A security vulnerability exists in the Intel HDMI Firmware Update Tool prior to version 1.79.1.1, which stems from the presence of an uncontrolled search path that could allow an authenticated user to potentiall...

PT-2023-13084 · Intel · Intel Nuc 11 Performance Mini Pc +3

Name of the Vulnerable Software and Affected Versions: IntelR NUC Boards affected versions not specified IntelR NUC 11 Performance Kit affected versions not specified IntelR NUC 11 Performance Mini PC affected versions not specified IntelR NUC Pro Compute Element affected versions not specified...

PT-2023-19965 · Seiko Solutions · Seiko Solutions Skybridge Mb-A200 +2

Name of the Vulnerable Software and Affected Versions: Seiko Solutions SkyBridge MB-A200 versions 01.00.05 and earlier Seiko Solutions SkyBridge BASIC MB-A130 versions 1.4.1 and earlier Seiko Solutions SkySpider MB-R210 versions 1.01.00 and earlier Description: The issue is related to the use of...

PT-2023-12662 · Intel · Intel Nuc Hdmi Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR HDMI Firmware Update tool for NUC versions prior to 1.79.1.1 Description: The issue is related to an uncontrolled search path in the IntelR HDMI Firmware Update tool for NUC, which may allow an authenticated user to potentially enable...