CVE-2023-3703 Proscend Advice ICR Series routers fw version 1.76

Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials...

Use-after-free in Linux kernel's net/sched: cls_fw component

...

CVE-2023-37214

CVE-2023-37214 concerns Heights Telecom ERO1xS-Pro Dual-Band FW version BZ_ERO1XP.025 . CNNVD reports a command injection vulnerability in this device/firmware. Connected documents provide limited technical detail: no explicit root cause, vulnerable component, exploit details, or CVSS data beyond...

PT-2023-4878

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability in the Linux kernel's net/sched: cls fw component can be exploited to achieve local privilege escalation. When fw change is called on an existing filter, t...

AZL-27677 CVE-2023-3776 affecting package kernel for versions less than 5.15.122.1-2

A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker ca...

DEBIAN-CVE-2023-3776

A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker ca...

UBUNTU-CVE-2023-3776

A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker ca...

CVE-2023-22299

An OS command injection vulnerability exists in the vtyshubus getfwlogs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability...

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L vtyshubus getfwlogs function, which can be exploited by an attacker to execute arbitrary commands on the system...

CVE-2023-22386

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory...

Memory corruption

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory...

CVE-2023-22386 Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory...

CVE-2023-22386

CVE-2023-22386 is a memory-corruption vulnerability in Qualcomm WLAN components. The issue occurs when processing WLAN firmware memory allocation requests, affecting Qualcomm WLAN subsystems embedded in devices running Android. The CVE is listed in Qualcomm’s July 2023 bulletin and tied to a High...

Huawei BiSheng-WNM FW Denial of Service Vulnerability (CNVD-2023-51675)

The Huawei BiSheng-WNM FW is a Huawei printer from Huawei China. A denial of service vulnerability exists in Huawei BiSheng-WNM FW version 3.0.0.325, which can be exploited by an attacker to cause an exception in the printer service...

CVE-2022-48472

A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211...

Command injection

A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211...

CVE-2022-48472

A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211...

CVE-2023-25683

This CVE concerns IBM PowerVM Hypervisor information disclosure. Affected firmware ranges are FW950.00–FW950.71, FW1010.00–FW1010.40, FW1020.00–FW1020.20, and FW1030.00–FW1030.11. The underlying issue allows an attacker with HMC service access to obtain sensitive information. IBM’s bulletin cites...

CVE-2023-30440

CVE-2023-30440 affects IBM PowerVM Hypervisor across multiple firmware branches (FW860, FW950, FW1010, FW1020, FW1030). The issue allows a local attacker who controls a partition with an SRIOV VF to cause a denial of service to a peer partition or arbitrary data corruption. Root cause details spe...

CVE-2023-30280

Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the fwSchedule.cgi page...