4764 matches found
Synology DiskStation Manager (DSM) < 7.1.1-42962-2 Multiple Vulnerabilities (Synology-SA-22:17) - Unreliable Remote Version Check
Multiple Synology NAS devices running DiskStation Manager DSM are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Synology DiskStation Manager (DSM) 6.2.x, 7.x < 7.1-42661 Multiple Vulnerabilities (Synology-SA-22:18)
Synology DiskStation Manager DSM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-26024
Improper access control in the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
Improper access control
Improper access control in the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-26024
The CVE-2022-26024 entry affects the Intel NUC HDMI Firmware Update Tool for NUC7i3DN/NUC7i5DN/NUC7i7DN, with an improper access control flaw that may allow an authenticated local user to escalate privileges. Affected versions are before 1.78.2.0.7. Intel recommends updating to 1.78.2.0.7 or late...
PT-2022-18543 · Intel · Intel Xmm 7560 Modem
Name of the Vulnerable Software and Affected Versions: IntelR XMMTM 7560 Modem software versions prior to M2 7560 R 01.2146.00 Description: The issue is related to incomplete cleanup in the IntelR XMMTM 7560 Modem software, which may allow a privileged user to potentially enable escalation of...
Intel® NUC HDMI Firmware Update Tool Advisory
Summary: A potential security vulnerability in the Intel® NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26024 Description:...
HPESBHF04375 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreVirtual 3000 File Controller - Prior to 3.0408042022 HPE StoreEasy 1450 Storage - Prior to 3.0408042022 HPE StoreEasy 1550 Storage - Prior to 3.0408042022 HPE StoreEa...
PT-2022-24914 · Microsoft · Azure Rtos Usbx
Name of the Vulnerable Software and Affected Versions: Azure RTOS USBX versions prior to 6.1.12 Description: The USB DFU UPLOAD functionality in Azure RTOS USBX may be utilized to introduce a buffer overflow, resulting in the overwrite of memory contents. In particular cases, this may allow an...
CVE-2022-43990
Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version = 2.2.0 as soon as possible available in SICK Support Portal...
CVE-2022-43989
Password recovery vulnerability in SICK SIM2x00 ARM Partnumber 1092673 and 1081902 with firmware version = 1.2.0 as soon as possible available in SICK Support Portal...
Multiple vulnerabilities in the web interfaces of Kyocera Document Solutions MFPs and printers
Overview The web interface "Command Center" of multiple MFPs and printers provided by KYOCERA Document Solutions Inc. contain multiple vulnerabilities listed below. Session Information Easily Guessable CWE-287 - CVE-2022-41798 Missing authorization CWE-425 - CVE-2022-41807 Stored cross-site...
CVE-2022-43990
Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version = 2.2.0 as soon as possible available in SICK Support Portal...
CVE-2022-27586
Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version = 2.0.0 as soon as possible available in SICK Support Portal...
PT-2022-18507 · Sick · Sick Sim1000 Fx
Name of the Vulnerable Software and Affected Versions: SICK SIM1000 FX Partnumber 1097816 and 1097817 versions prior to 1.6.0 Description: A password recovery issue allows an unprivileged remote attacker to gain access to the user level defined as RecoverableUserLevel by invoking the password...
JVN#46345126: Multiple vulnerabilities in the web interfaces of Kyocera Document Solutions MFPs and printers
The web interface "Command Center" of multiple MFPs and printers provided by KYOCERA Document Solutions Inc. contain multiple vulnerabilities listed below. Session Information Easily Guessable CWE-287 - CVE-2022-41798 Version| Vector| Score ---|---|--- CVSS v3|...
CVE-2022-43990
The CVE-2022-43990 entry affects SICK SIM1012 Partnumber 1098146 with firmware versions prior to 2.2.0. It permits an unprivileged remote attacker to invoke the password recovery mechanism to gain the RecoverableUserLevel, increasing privileges and impacting confidentiality, integrity, and availa...
PT-2022-18508 · Sick · Sick Sim1004
Name of the Vulnerable Software and Affected Versions: SICK SIM1004 Partnumber 1098148 versions prior to 2.0.0 Description: A password recovery issue allows an unprivileged remote attacker to invoke the password recovery mechanism method, gaining access to the user level defined as...
PT-2022-27058 · Sick · Sick Sim1012
Name of the Vulnerable Software and Affected Versions: SICK SIM1012 Partnumber 1098146 versions prior to 2.2.0 Description: A password recovery issue allows an unprivileged remote attacker to gain access to the RecoverableUserLevel by invoking the password recovery mechanism method, leading to...