8 matches found
EUVD-2025-208548
Improper input validation in the UEFI FlashUcAcmSmm module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-387199)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387199 advisory. In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructe...
Input: ims-pcu - check record size in ims_pcu_flash_firmware()
...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hexadecimal numbers or similar elements. However,...
CVE-2024-44815
Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...
CVE-2024-44815
Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...
CVE-2024-44815
The Hathway Skyworth Router CM5100 (version 4.1.1.24 ) is vulnerable to a security flaw where a physically proximate attacker can obtain user credentials by accessing the SPI flash Firmware W25Q64JV . The root cause is that login credentials for both the web portal and the Wi-Fi access point are ...