PT-2022-8316 · Cypress · Cypress Wireless Combo

Name of the Vulnerable Software and Affected Versions: Cypress and Broadcom Wireless Combo chips versions prior to the 2021-01-26 Bluetooth firmware update Description: The issue allows a Bluetooth outage via a "Spectra" attack when a specific Bluetooth firmware update is not present. It is also...

CVE-2022-23997

Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission...

CVE-2022-23995

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission...

CVE-2022-23994

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission...

CVE-2022-23995

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission...

CVE-2022-23994

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission...

Spoofing

Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission...

Improper access control

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission...

Spoofing

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission...

Spoofing

Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission...

CVE-2022-23997

CVE-2022-23997 affects Wear OS 3.0 before the February 2022 firmware update, involving the StTheaterModeDurationAlarmReceiver component. The vulnerability is described as an unprotected component that allows untrusted applications to disable theater mode without proper permission. The connected R...

CVE-2022-23997

Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission...

CVE-2022-23996

CVE-2022-23996 concerns an unprotected component vulnerability in the Wear OS 3.0 component named StTheaterModeReceiver . The issue, present before the firmware update in Feb-2022, allows untrusted applications to enable bedtime mode without proper permission. Affected platform: Wear OS 3.0. Root...

CVE-2022-23995

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission...

CVE-2022-23994

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission...

CVE-2022-23995

CVE-2022-23995 affects Wear OS 3.0 devices with StBedtimeModeAlarmReceiver. The vulnerability arises from an unprotected component that allows untrusted apps to change bedtime mode without proper permission. Impact is described as low to medium depending on base score model (CVSS v3.1: 3.3, LOW; ...

CVE-2022-23994

CVE-2022-23994 : Improper access control in Wear OS 3.0’s StBedtimeModeReceiver allows untrusted apps to change bedtime mode without proper permission before the Feb-2022 firmware update. Impact is limited to altering bedtime mode; no broader system compromise is described in the provided documen...

OESA-2022-1515 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as...

PT-2022-15990 · Rpmb · Rpmb

Name of the Vulnerable Software and Affected Versions: RPMB ldfw versions prior to SMR Feb-2022 Release 1 Description: The issue is related to improper input validation in the SMC SRPMB WSM handler of RPMB ldfw, allowing arbitrary memory write and code execution. Recommendations: For versions pri...

Vulnerabilities fixed in Schneider Electric Modicon M241/M251

Schneider Electric has fixed vulnerabilities in the CODESYS web server and gateway components of Modicon M241 and M251 controllers. An unauthenticated remote malicious person could potentially exploit the vulnerabilities to cause a denial-of-service cause or execute arbitrary code with the...