61 matches found
CVE-2024-3052
CVE-2024-3052 affects SiLabs Z-Wave over IP Gateway (Z/IP Gateway). Connected sources describe a Denial of Service caused by malformed S2 Nonce Get command classes that can crash the gateway, with a hard reset required to recover. Reported vulnerable context includes SiLabs Z-Wave over IP Gateway...
CVE-2024-3052 Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability
Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway...
CVE-2024-3052 Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability
Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway...
CVE-2024-3051 Z/IP Gateway Device Reset Locally Denial of Service Vulnerability
Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time...
CVE-2024-3051
CVE-2024-3051 affects SiLabs Z/IP Gateway (Z-Wave over IP Gateway). Concrete details in connected sources show a Denial of Service via Malformed Device Reset Locally command classes, causing the gateway to stop acknowledging frames from the end device during the outage. CNNVD notes vulnerable ver...
Silicon Labs PC Controller Security Vulnerability
Silicon Labs PC Controller is an installation and maintenance tool for Z-Wave networks from Silicon Labs that allows developers to manage Z-Wave devices on a PC for network configuration, troubleshooting, and monitoring. A security vulnerability exists in Silicon Labs PC Controller v5.54.0 and...
CVE-2023-25369
Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command...
SUSE CVE-2017-5357
regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service crash via a malformed command, which triggers an invalid free...
A Security Vulnerability in the KmsdBot Botnet
Security researchers found a software bug in the KmsdBot cryptomining botnet: With no error-checking built in, sending KmsdBot a malformed command--like its controllers did one day while Akamai was watching--created a panic crash with an "index out of range" error. Because theres no persistence...
Command injection
A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...
The vulnerability of the Manager component in the real-time data synchronization tool Oracle GoldenGate, which allows a hacker to trigger a service failure.
The vulnerability of the Manager component in the real-time data synchronization tool Oracle GoldenGate relates to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending an incorrect command during the TCP connection...
Design/Logic Flaw
When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20,...
CVE-2018-11996
When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20,...
VulnCheck KEV: CVE-2009-0099
The Electronic Messaging System Microsoft Data Base EMSMDB32 provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service application outage via a malformed MAPI command, aka "Literal...
Command injection
regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service crash via a malformed command, which triggers an invalid free...
VxWorks WebCLI vulnerable to denial-of-service (DoS)
Overview The VxWorks WebCLI contains a denial-of-service DoS vulnerability. The VxWorks WebCLI contains a denial-of-service DoS vulnerability due to an issue in parsing command strings. Hisashi Kojima and Masahiro Nakada of Fujitsu Laboratories Ltd. reported this vulnerability to IPA. JPCERT/CC...
EIQ Networks Network Security Analyzer DoS
Crash on malformed command to TCP/10618 port...
TYPSoft FTP Server Malformed STOR / RETR Command DoS
The remote FTP server crashes when it is sent the command RETR ../../ or STOR ../../ An attacker may use this flaw to cause the server to crash. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and C...
Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure
source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user could force the FTP server to make an external SMB...