New Mobile Internet Protocol Vulnerabilities Let Hackers Target 4G/5G Users

High impact vulnerabilities in modern communication protocol used by mobile network operators MNOs can be exploited to intercept user data and carry out impersonation, fraud, and denial of service DoS attacks, cautions a newly published research. The findings are part of a new Vulnerabilities in...

Huawei Data Communication: Memory Leak Vulnerability in Several Huawei Products (huawei-sa-20171213-04-xml)

There is a memory leak vulnerability in several Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

lte-unas.cz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1180244 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Quick Start Guide: ZTD via the LTE Interface (Citrix SD-WAN 110-LTE-SE)

This document depicts a Quick Start Guide for Citrix SD-WAN 110-LTE-SE appliances when performing ZTD Zero Touch Deployment via the LTE Interface...

CVE-2019-20783

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...

CVE-2019-20783

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...

Authentication flaw

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...

CVE-2019-20783

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...

CVE-2019-20783

CVE-2019-20783 affects LG mobile devices running Android 7.0–8.1 (North America CDMA). The issue is in the LTE protocol implementation, which allows a bypass of Authentication and Key Agreement (AKA). The available records (NVD, Red Hat advisory, CVE listings) describe the vulnerability and its L...

Arbitrary Code Execution

wireshark is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the Wireshark MAC-LTE dissector. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshar...

CVE-2020-5548

Yamaha LTE VoIP RouterNVR700W firmware Rev.15.00.15 and earlier, Yamaha Gigabit VoIP RouterNVR510 firmware Rev.15.01.14 and earlier, Yamaha Gigabit VPN RouterRTX810 firmware Rev.11.01.33 and earlier, RTX830 firmware Rev.15.02.09 and earlier, RTX1200 firmware Rev.10.01.76 and earlier, RTX1210...

The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow a malicious actor to trigger service failures or execute arbitrary codes remotely...

CVE-2020-9431

A memory leak was discovered in Wireshark in the LTE RRC dissector. This issue allows an attacker to trigger the flaw by injecting special packets onto the wire or by convincing a victim user into opening a malformed packet trace file...

Security fix for the ALT Linux 10 package wireshark version 3.0.9-alt1

March 12, 2020 Anton Farygin 3.0.9-alt1 - 3.0.9 - fixes: LTE RRC dissector could leak memory. CVE-2020-9431 WiMax DLMAP dissector could crash. CVE-2020-9430...

Wireshark Security Updates (wnpa-sec-2020-03, wnpa-sec-2020-04, wnpa-sec-2020-05) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

MGASA-2020-0111 Updated wireshark packages fix security vulnerabilities

Updated wireshark packages fix security vulnerabilities: LTE RRC dissector memory leak. WiMax DLMAP dissector crash. EAP dissector crash...

Wireshark 2.6.x < 2.6.15 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.6.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.15 advisory. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. Thi...

Wireshark 3.2.x < 3.2.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.2 advisory. - In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak...

CVE-2020-9431

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations...

DEBIAN-CVE-2020-9431

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations...