6104 matches found
PT-2022-15233 · Qualcomm · Snapdragon Consumer Iot
Name of the Vulnerable Software and Affected Versions: Snapdragon Consumer IOT affected versions not specified Description: The issue is related to memory corruption in the graphic driver due to a use-after-free error. This occurs when multiple threads of an application call the driver. The...
CVE-2021-35113: Improper Verification of Cryptographic Signature
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2021-35133: Use After Free
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-35134: Incorrect Calculation of Buffer Size
Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2022-22097: Use After Free
Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT...
Input validation
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system file os/net/ipv6/sicslowpan.c contains an input function that processes incoming packets and copies them into a packet buffer. Because of a...
CVE-2022-36054 Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system file os/net/ipv6/sicslowpan.c contains an input function that processes incoming packets and copies them into a packet buffer. Because of a...
CVE-2022-36054
CVE-2022-36054ffects Contiki-NG: the 6LoWPAN processing in os/net/ipv6/sicslowpan.c uses an input function that copies packets into a buffer without proper length checking, enabling an out-of-bounds write when handling sufficiently large unfragmented packets or the first fragment of a fragmented ...
CVE-2022-36052
CVE-2022-36052 affects Contiki-NG: the 6LoWPAN UDP header handling may cast a UDP header at an offset without ensuring the buffer can hold it, causing an out-of-bounds read. Affected are Contiki-NG versions prior to 4.8 that may receive 6LoWPAN packets from external parties. The issue is patched ...
CVE-2022-36053
Contiki-NG prior to 4.8 is affected by an out-of-bounds read in the IPv6 extension header processing inside the low-power uIP buffer (uipbuf_get_next_header). The vulnerability arises from casting a pointer to a uip_ext_hdr into the packet buffer at varying offsets without proper bounds checking,...
CVE-2022-36052: Out-of-bounds Read
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UDP header structure at a certain offset in a packet buffer. The code does not check whether the packet buffer is large enough to fit a full UDP heade...
Seiko Solutions SkyBridge MB-A100/A110: Command Injection Vulnerability
The Seiko Solutions SkyBridge MB-A100/A110 is an LTE-compatible IoT router from Seiko Solutions, Japan. A security vulnerability exists in the Seiko Solutions SkyBridge MB-A100/A110 v4.2.0 and earlier, which stems from the ipAddress parameter being found to contain command injection...
Seiko Solutions SkyBridge MB-A100/A110: Command Injection Vulnerability
The Seiko Solutions SkyBridge MB-A100/A110 is an LTE-compatible IoT router from Seiko Solutions, Japan. A security vulnerability exists in the Seiko Solutions SkyBridge MB-A100/A110 v4.2.0 and earlier, which is caused by a command injection in the Ping parameter in pingexec.cgi...
iotone.com Cross Site Scripting vulnerability OBB-2871748
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2022-3414 Malicious code in google-iot-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b6b3105c3a643952ccd44dddd3ed028de61de359b2072023d06603b08279588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in google-iot-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b6b3105c3a643952ccd44dddd3ed028de61de359b2072023d06603b08279588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
New research indicates that over 80,000 Hikvision surveillance cameras in the world today are vulnerable to an 11 month-old command injection flaw. Hikvision – short for Hangzhou Hikvision Digital Technology – is a Chinese state-owned manufacturer of video surveillance equipment. Their customers...
Bluetooth + Electrical switchgear
The ongoing rapid growth of Industrial IoT IIoT across all business sectors continues to bring to focus the discrepancies that exist between the approaches to safety and cyber-security on safety critical sites. Safety has been culturally ingrained into all aspects of industrial site operations fo...
A Door Isn’t a Door When It’s Ajar- Part 1
A Door Isn’t a Door When It’s Ajar - Part 1 By Trellix · August 11, 2022 This story was also written by Steve Povolny and Sam Quinn Contents Executive Summary Target Selection What is it? Reconnaissance & Standard Operations Recon Standard Operations Hardware Hacking Hardware Hacking Shopping Lis...
