4749 matches found
CVE-2025-57431
The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...
Sound4 PULSE-ECO AES67 å®å Øę¼ę“
The Sound4 PULSE-ECO AES67 is a radio station audio processing device from Sound4 France. A security vulnerability exists in the Sound4 PULSE-ECO AES67 version 1.22, which stems from a firmware update mechanism that does not validate the integrity of manual.sh, and could lead to remote code...
CVE-2025-57431
The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The underlying issue is that the update mechanism does not validate the integrity of the manual.sh script, allowing an attacker to inject arbitrary ...
PT-2025-38749
Name of the Vulnerable Software and Affected Versions Sound4 PULSE-ECO AES67 version 1.22 Description The web-based management interface is susceptible to Remote Code Execution RCE through a malicious firmware update package. The system does not properly validate the integrity of the manual.sh...
CVE-2025-57431
The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...
CVE-2025-57431
The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...
Multiple vulnerabilities in I-O DATA wireless LAN routers
Overview Wireless LAN routers provided by I-O DATA DEVICE, INC. contains multiple vulnerabilities listed below. Hidden functionality CWE-912 - CVE-2025-55075 OS command injection CWE-78 - CVE-2025-58116 Chuya Hayakawa of 00One, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinat...
CVE-2025-7937
CVE-2025-7937 affects Supermicro BMC firmware validation on the MBD-X12STW, enabling an attacker to update system firmware with a crafted image by bypassing the RoT verification.* The root cause involves bypassing the firmware image validation logic via a forged or manipulated table (e.g., the un...
CVE-2025-7937 Supermicro BMC firmware update validation bypass
There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image...
CVE-2025-6198 Supermicro BMC firmware update validation bypass
There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image...
CVE-2025-6198 Supermicro BMC firmware update validation bypass
There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can update the system firmware with a specially crafted image...
CVE-2025-6198
CVE-2025-6198 affects Supermicro BMC firmware on the MBD-X13SEM-F motherboard. The issue stems from improper validation in the BMC firmware image verification, enabling a crafted firmware image to bypass the signing/verification process and update the system firmware. Public reporting connects th...
SuperMicro MBD-X13SEM-F å®å Øę¼ę“
The SuperMicro MBD-X13SEM-F is a server motherboard from SuperMicro, Inc. A security vulnerability exists in the SuperMicro MBD-X13SEM-F that stems from a flaw in the BMC firmware validation logic, which could result in a specially crafted image updating the system firmware...
PT-2025-38127
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.10.2 through 11.12.4 Update1 WatchGuard Fireware OS versions 12.0 through 12.11.3 WatchGuard Fireware OS version 2025.1 Description An out-of-bounds write vulnerability exists in WatchGuard Fireware OS,...
DEBIAN-CVE-2023-53282
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write During the sysfs firmware write process, a use-after-free read warning is logged from the lpfcwrobject routine: BUG: KFENCE: use-after-free read in...
CVE-2023-53282 scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write During the sysfs firmware write process, a use-after-free read warning is logged from the lpfcwrobject routine: BUG: KFENCE: use-after-free read in...
Security Bulletin: This Power System update is being released to address CVE-2025-36035
Summary The PowerVM hypervisor is vulnerable to a carefully crafted IBMi hypervisor call that can crash system or make a limited amount of system memory available Vulnerability Details CVEID:CVE-2025-36035 DESCRIPTION: The PowerVM hypervisor could allow a local privileged user to cause a denial o...
Intel Core Ultra Processor Firmware Security Update
Intel has informed HP of potential security vulnerabilities for some IntelĀ® Coreā¢ Ultra processors, which might allow information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP...
PT-2025-85: Insufficient access control in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 Š”PM723-01. Exploitation of the vulnerability allows an attacker with an unprivileged account to gain the access to protected information. Vulnerability status: Confirmed by vendor Date of...
PT-2025-84: Insecure firmware update mechanism in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 Š”PM723-01. Exploitation of the vulnerability allows a remote attacke with administrative permissions in the execution environment to upload a modified update archive and execute arbitrary cod...