Texas Instruments SimpleLink 输入验证错误漏洞

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products and can be exploited by an attacker to remotely execute code...

Fleeceware Apps Bank $400M in Revenue

About 204 different “fleeceware” applications with a combined billion+ downloads have raked in more than $400 million in revenue so far, via the Apple App Store and Google Play, analysis has revealed. Fleeceware apps generally offer users a free trial to “test” the app, before commencing automati...

CVE-2021-3285

jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS...

TI Code Composer Studio IDE Trust Management Issue Vulnerability

TI Code Composer Studio IDE is a Texas Instruments TI integrated development environment that supports TI's microcontroller and embedded processor products. The software includes a complete set of tools for developing and debugging embedded applications. It includes a C/C++ compiler for...

National Instruments CompactRIO

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: National Instruments Corp. NI Equipment: CompactRIO Vulnerability: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

CVE-2020-27891

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal...

CVE-2020-27890

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...

CVE-2020-27892

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd...

CVE-2020-27890

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...

CVE-2020-27891

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal...

Information disclosure

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...

Design/Logic Flaw

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd...

CVE-2020-27890

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...

CVE-2020-27890

The vulnerability CVE-2020-27890 affects TI CC2538 devices using Z-Stack 3.0.1, where the Zigbee ZCL Write Attributes No Response message is not processed correctly. The issue causes a crash in zclParseInWriteCmd() and prevents updating the targeted attribute’s value, potentially leaving the attr...

CVE-2020-27891

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal...

CVE-2020-27891

CVE-2020-27891 affects TI CC2538 with Z-Stack 3.0.1 where a ZCL Read Reporting Configuration Response is not properly processed, causing a crash in zclHandleExternal(). Public details show CVSS v3.1 base score 7.5 (Network attack, low complexity, no privileges required, availability impact HIGH) ...

CVE-2020-27892

CVE-2020-27892 affects TI CC2538 devices running Z-Stack 3.0.1. The Zigbee protocol stack fails to correctly process ZCL Discover Commands Received/Generated Response messages, causing a crash in zclParseInDiscCmdsRspCmd(). The NVD entry lists CVSS v2/3 base scores of 5.0 (MEDIUM) and 7.5 (HIGH) ...

CVE-2020-27892

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd...

sierrainstruments.com Cross Site Scripting vulnerability OBB-1305784

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-13593

The Bluetooth Low Energy Secure Manager Protocol SMP implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radi...