Mageia: Security Advisory (MGASA-2017-0079)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-14107

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN...

Stack overflow

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN...

CVE-2020-14107

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN...

CVE-2020-14107

Technical details about CVE-2020-14107 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

PT-2022-8545

Name of the Vulnerable Software and Affected Versions Cast affected versions not specified Description A stack overflow in the HTTP server of Cast can be exploited to make the app crash in a Local Area Network LAN setting. Recommendations At the moment, there is no information about a newer versi...

CVE-2020-14107: Out-of-bounds Write

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN...

小米投屏 缓冲区错误漏洞

Xiaomi Xiaomi Screen Throw is a Chinese Xiaomi Technology Xiaomi company's offers a screen throw function. A security vulnerability exists in the Xiaomi Screen Throw http service, which could cause the application to crash on a LAN...

ASUS RT-AX56U Path Traversal Vulnerability

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A path traversal vulnerability exists in ASUS RT-AX56U, which stems from the insufficient filtering of special characters in URL parameters by the login function of ASUS RT-AX56U, which could be exploited by an unauthenticated LAN attacke...

CVE-2022-22991

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...

Command injection

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...

CVE-2022-22991 Command injection through unsecured HTTP calls on Western Digital My Cloud devices

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...

CVE-2022-22991

CVE-2022-22991 affects Western Digital My Cloud devices running My Cloud OS 5. The issue enables a command injection via DNS spoofing to force loading over HTTP, due to insufficient validation of a user-supplied string before a system call. It is described as network-adjacent remote code executio...

CVE-2022-22991: Improper Neutralization of Special Elements used in an OS Command

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...

PT-2022-15761

Name of the Vulnerable Software and Affected Versions Western Digital MyCloud PR4100 affected versions not specified Description A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. The...

Mitsubishi Electric MELSEC-F Series

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC-F Series Vulnerability: Lack of Administrator Control Over Security 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to a...

Mitsubishi Electric MELSEC-F Series

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC-F Series Vulnerability: Improper Initialization 2. RISK EVALUATION Successful exploitation of this vulnerability may cause a denial-of-service condition in the...

CVE-2022-22171

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service DoS by sending specific packets over VXLAN which cause the PFE to reset. This issue...

CVE-2022-22170

A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service DoS by sending specific packets over VXLAN which cause heap memory to leak and on...

MediaTek MC7603E Wi-Fi Driver DoS

The vulnerability of the Wi-Fi driver microprogramming software for MediaTek’s MC7603E, MC7610, MC7612, MC7613, MC7615, MC7620, MC7622, MC7628, MC7629, and MC7915 lies in the reading of data outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause servic...