H3C Magic NX15 DoS

The vulnerability of the sub416874 function in H3C Magic NX15 Wi-Fi routers’ microprogrammed software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

ROS-20260921-73-0118

The vulnerability of AMD’s microprogrammed software lies in the improper isolation of common resources between trusted and untrusted agents. Exploiting this vulnerability can allow attackers to increase their privileges...

Ecostruxure Machine Expert HVAC Info Disclosure

The vulnerability of the microprogramming software used in Ecostruxure Machine Expert HVAC programmable logic controllers is related to the storage of confidential information in an open manner. Exploiting this vulnerability could allow a intruder to disclose the protected information...

PLANET IGS-5225-8P2T4S Code Debugging Privilege Escalation

The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial control switches is related to insufficient protection of operational data during code debugging. Exploiting this vulnerability can allow attackers to execute arbitrary code and enhance their privileges...

Schneider Electric Easergy Relay Protection Unauthorized Access

The vulnerability of microprogrammed software in Schneider Electric Easergy relay protection and control devices is related to the use of pre-installed account data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

EcoStruxure Foxboro DCS Deserialization Code Execution

The vulnerability of the microprogrammed software in the distributed control system EcoStruxure Foxboro DCS is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Zyxel ATP USG FLEX USG FLEX 50(W)/USG20(W)-VPN

The vulnerability of the microprogrammed software in Zyxel ATP, USG FLEX, and USG FLEX 50W/USG20W-VPN devices is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

DVP-12SE11T Auth Bypass

The vulnerability of the microprogrammed software of the DVP-12SE11T controllers is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures remotely...

Siemens SIMATIC S7 Insufficient Verification DoS

The vulnerability of microprogrammed software in Siemens SIMATIC S7 programmable logic controllers is related to insufficient verification of the communication channel source. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Ruckus Virtual SmartZone Authentication Bypass

The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

Ruckus Virtual SmartZone’s controllers Information Disclosure

The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software relates to the exploitation of a relative path. Exploiting this vulnerability allows an attacker to upload arbitrary files and gain unauthorized access to confidential information...

Ruckus Virtual SmartZone Controllers Code Execution

The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Differential Protection Relay Uncontrolled Resource Consumption

The vulnerability of microprogrammed software in differential protection relays for transformers, such as IDF, and in line distance protection relays like ZLF, is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the...

Siemens LOGO! RCE

The vulnerability of the microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPL...

Microprogrammed Software Code Execution

The vulnerability of the microprogrammed software in network video recorders Digiever DS is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Intel Xeon 6 Buffer Overflow

The vulnerability of microprogrammed software in Intel Xeon 6 processor with P-cores relates to writing beyond buffer boundaries. Exploiting this vulnerability allows attackers to compromise the confidentiality and integrity of the protected information...

Cisco Nexus Virtual Switches DoS

The vulnerability of microprogrammed software in Cisco Nexus 3000 Series and Cisco Nexus 9000 Series virtual switches is related to the manipulation of indicators. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Linksys Router Command Execution

The vulnerability of the microprogrammed software of Linksys routers such as E4200, E3200, E3000, E2500, E2100L, E2000, E1550, E1500, E1200, E1000, and E900 is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitra...

AXC F 1152 Logic Controller DoS

The vulnerability of microprogrammed software in logic controllers AXC F 1152, AXC F 2152, AXC F 3152, BPC 9102S, and RFC 4072S is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Huawei EchoLife EG8141A5 Unauthorized Access

The vulnerability of Huawei EchoLife EG8141A5, EG8145V5, and EG8145V5-V2 microprogrammed router software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...