CVE-2021-21966

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-21966

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability...

Information disclosure

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-21966

The TI CC3200 SimpleLink Solution NWP 2.9.0.0 HTTP Server component exposes /ping.html to unauthenticated POST requests. A POST with parameters __SL_P_T.A/B/C can trigger an uninitialized read, causing information disclosure. TALOS-2021-1393 documents the root cause as CWE-457 (Use of Uninitializ...

CVE-2021-21966

An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability...

Texas Instruments Cc3200 SimpleLink Solution Nwp 环境问题漏洞

Texas Instruments Cc3200 SimpleLink Solution Nwp is a Texas Instruments microcontroller with built-in 2.4Ghz Wifi functionality from Texas Instruments, Inc. An environmental issue vulnerability exists in the Texas Instruments Cc3200 SimpleLink Solution Nwp version 2.9.0.0, which stems from an...

Texas Instruments CC3200 SimpleLink Solution HTTP Server /ping.html information disclosure vulnerability

Summary An information disclosure vulnerability exists in the HTTP Server /ping.html functionality of Texas Instruments CC3200 SimpleLink Solution NWP 2.9.0.0. A specially-crafted HTTP request can lead to an uninitialized read. An attacker can send an HTTP request to trigger this vulnerability...

NI Service Locator 代码问题漏洞

NI Service Locator is the NI Service Locator stores registered services and returns data to the client requesting the service. A security vulnerability exists in NI Service Locator versions prior to 18.0 that allows a local user to insert arbitrary code into an unquoted service path and elevate...

sensorinstruments.de Cross Site Scripting vulnerability OBB-2215868

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability in the implementation of the HeapMem_allocUnprotected() function (tirtos/packages/ti/sysbios/heaps/HeapMem.c) of the software development kit for microcontroller families SimpleLink (CC13XX, CC26XX, CC32XX, and MSP432E4) allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the HeapMemallocUnprotected function implementation tirtos/packages/ti/sysbios/heaps/HeapMem.c in the software development kit for microcontroller families SimpleLink CC13XX, CC26XX, CC32XX, and MSP432E4 is caused by a numerical overflow. Exploiting this vulnerability could...

Texas Instruments Ble Stack 安全漏洞

Texas Instruments Ble Stack is a low-power Bluetooth software stack from Texas Instruments, USA. A security vulnerability exists in Texas Instruments Ble Stack. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

CVE-2021-38304

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-38304

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-38304

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-38304

The CVE-2021-38304 entry affects the National Instruments NI-PAL driver (versions 20.0.0 and prior). Root cause: improper input validation; result is local privilege escalation by a user with local access. Impact: privilege escalation, with local attack vector; no user interaction required (per C...

CVE-2021-38304

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-34149

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after the paging...

Information disclosure

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after the paging...

CVE-2021-34149

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after the paging...