Security Bulletin: Vulnerability in RC4 stream cipher affects TS2900 (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects TS2900. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this vulnerability to...

PT-2023-17765 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btm ble read remote features complete function of btm ble gap.cc due to improper input validation. This could lead to local information...

Design/Logic Flaw

The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system...

CVE-2023-28610

The CVE-2023-28610 entry affects OMICRON StationGuard and StationScout prior to version 2.21. The flaw arises in the update process, where a modified firmware image can be supplied to remote-update functionality, allowing a remote attacker to gain root access to the system. According to the sourc...

CVE-2023-28610

The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system...

PT-2023-20688

Name of the Vulnerable Software and Affected Versions Samsung Baseband Modem Chipset for Exynos Modem 5123 Samsung Baseband Modem Chipset for Exynos Modem 5300 Samsung Baseband Modem Chipset for Exynos 980 Samsung Baseband Modem Chipset for Exynos 1080 Samsung Baseband Modem Chipset for Exynos Au...

Security Bulletin: NVIDIA DGX-2, DGX Station A100, and DGX A100 - March 2023

NVIDIA has released a firmware security update for the NVIDIA DGX-2™ server, DGX A100 server, and DGX Station A100. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, loss of data integrity, information disclosure, or data tampering. To...

TP-Link T2600G-28SQ uses vulnerable SSH host keys

Overview TP-Link layer-2 switch T2600G-28SQ uses vulnerable SSH host keys CWE-1391. Kuniyuki Hasegawa of VeriServe Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact The credential information for a...

Security Bulletin: Multiple Vulnerabilities in Intel Firmware affect Cloud Pak System

Summary Vulnerabilities in Intel firmware affect Cloud Pak System. Cloud Pak system nodes using Intel driver firmware recommended update. Vulnerability Details CVEID:CVE-2021-0197 DESCRIPTION: Intel Ethernet controllers are vulnerable to a denial of service, caused by a protection mechanism failu...

Dell PowerEdge Server BIOS 缓冲区错误漏洞

Dell PowerEdge Server BIOS is a system update driver for the Dell Dell from Dell Dell USA. A security vulnerability exists in the Dell PowerEdge Server BIOS that stems from an incorrect SMM communications buffer validation vulnerability...

PT-2023-2545 · Tp Link · Tp-Link T2600G-28Sq

Name of the Vulnerable Software and Affected Versions: TP-Link L2 switch T2600G-28SQ versions prior to T2600G-28SQUN V1 1.0.6 Build 20230227 Description: The issue is related to errors in handling SSH keys, which can allow a remote attacker to gain unauthorized access to protected information. A...

ThinkPad BIOS Vulnerabilities - Lenovo Support US

No description provided...

PT-2023-2025

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX21 versions prior to 1.1.4 Build 20230219 Description An unauthenticated attacker can execute arbitrary commands with root privileges on the web management interface via a command injection issue. The flaw exists because the...

Multiple vulnerabilities in SEIKO EPSON printers/network interface Web Config

Overview Web Config for printers/network interface provided by SEIKO EPSON CORPORATION contains multiple vulnerabilities listed below. Stored cross-site Scripting CWE-79 - CVE-2023-23572 Cross-Site Request Forgery CWE-352 - CVE-2023-27520 Takaya Noma, Yudai Morii, Hiroki Yasui, Takayuki Sasaki, a...

JVN#82424996: Multiple vulnerabilities in SEIKO EPSON printers/network interface Web Config

Web Config for printers/network interface provided by SEIKO EPSON CORPORATION contains multiple vulnerabilities listed below. Stored cross-site Scripting CWE-79 - CVE-2023-23572 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.8 CVSS v2|...

PT-2023-2117 · NetGear · Netgear Nighthawk Wifi6 Router

Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk WiFi6 Router versions prior to V1.0.10.94 Description: The issue is related to the file sharing mechanism in the NETGEAR Nighthawk WiFi6 Router, which allows users with access to this feature to access arbitrary files on the...

HPESBHF04407 rev.1 - Certain HPE Edgeline Servers using Certain Intel Processor, INTEL-SA-00738, 2023.1 IPU – Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920 Server Blade - Prior to 1.6602-02-2023 HPE Edgeline e920d Server Blade - Prior to 1.6602-02-2023 HPE Edgeline e920t Server Blade - Prior to 1.6602-02-2023 CVSS...

Nuvoton TPM Denial of Service Vulnerability - Lenovo Support US

No description provided...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2022-43902)

Summary IBM MQ Appliance has resolved a denial of service vulnerability. Vulnerability Details CVEID:CVE-2022-43902 DESCRIPTION: IBM MQ is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. CVSS Base score: 6.5 CVSS Temporal Score: See:...

Security Bulletin: This Power System update is being released to address CVE-2022-3435

Summary POWER10: In response to a security issue with ipv4 network connections, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE 2022-3435. Vulnerability Details CVEID:CVE-2022-3435 DESCRIPTION: Linux Kernel could allow a remote...