4771 matches found
Huawei EulerOS: Security Advisory for linux-firmware (EulerOS-SA-2023-1107)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Intel PROSet Wireless WiFi and Killer WiFi Advisory - Lenovo Support US
No description provided...
Intel Wireless Bluetooth and Killer Bluetooth Advisory - Lenovo Support US
No description provided...
Intel Chipset Firmware Advisory - Lenovo Support US
No description provided...
CVE-2022-37933
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow local unauthorized data injection. HPE has made the following software updates to resolve the vulnerability in HPE Superdome Flex firmware...
CVE-2022-37933
HPE Superdome Flex and Superdome Flex 280 servers are affected by CVE-2022-37933. Affects: HPE Superdome Flex firmware 3.60.50 and below; HPE Superdome Flex 280 firmware 1.40.60 and below. Issue causes local unauthorized data injection. Remediation: upgrade to firmware versions above 3.60.50 (for...
CVE-2022-48194
TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service DoS by uploading a crafted firmware update because the signature check is inadequate...
CVE-2022-48194
TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service DoS by uploading a crafted firmware update because the signature check is inadequate...
Code injection
TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service DoS by uploading a crafted firmware update because the signature check is inadequate...
PT-2022-28121 · NetGear · Netgear R6400V2 +8
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX40 versions prior to 1.0.2.60 NETGEAR RAX35 versions prior to 1.0.2.60 NETGEAR R6400v2 versions prior to 1.0.4.122 NETGEAR R6700v3 versions prior to 1.0.4.122 NETGEAR R6900P versions prior to 1.3.3.152 NETGEAR R7000P versions prior...
CVE-2022-48194
CVE-2022-48194 affects TP-Link TL-WR902AC devices running V3 0.9.1. An authenticated attacker can upload a crafted firmware update to achieve remote code execution or DoS due to an inadequate firmware-signature check. The vulnerability is demonstrated in public writeups/exploits (e.g., Exploit-DB...
PT-2022-27922 · Trendnet · Trendnet Tew755Ap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the update file name parameter in the auto up fw sub 420A04 function. Recommendations: For TRENDnet TEW755AP version 1.13B01, consider restrictin...
TRENDnet TEW-755AP 缓冲区错误漏洞
The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the updatefilename parameter of the autoupfw sub420A04 function, which can be exploited by an attacker to execute arbitrary...
PT-2022-28119 · Tp Link · Tp-Link Tl-Wr902Ac
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR902AC devices through V3 0.9.1 Description: The issue allows remote authenticated attackers to execute arbitrary code or cause a Denial of Service DoS by uploading a crafted firmware update because the signature check is...
CVE-2022-48194
TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service DoS by uploading a crafted firmware update because the signature check is inadequate...
Synology DiskStation Manager (DSM) 5.2.x, 6.x < 6.2-23739 Multiple Vulnerabilities (Synology_SA_18:24)
Synology DiskStation Manager DSM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2021-35951
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows an Unauthenticated Remote attacker to send a malicious firmware update via BLE and brick the device...
CVE-2021-35951
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows an Unauthenticated Remote attacker to send a malicious firmware update via BLE and brick the device...