5949 matches found
The reality of OT segregation
One of the areas I find most fascinating about industrial control systems and related operational technology is the perception that OT networks are segregated and isolated from the wider IT network. We’re often told that “IT and OT are totally separated” as there’s a genuine belief that OT is...
NetUSB Module Code Execution
The vulnerability of the NetUSB module in the embedded software of Netgear routers such as D7800, R6220, R6230, R6400v2, R6700v3, R7000, and R7800 is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely by using port...
CVE-2022-22374
The BMC IBM Power 9 AC922 OP910, OP920, OP930, and OP940 may be subject to a firmware downgrade attack which may affect its ability to operate its host. IBM X-Force ID: 221442...
Update now! Many HP printers affected by three critical security vulnerabilities
In two security advisories, HP has alerted users to the existence of security vulnerabilities in several of its printer models. In total, four vulnerabilities were patched, but three of those vulnerabilities are rated critical, and all of them can lead to remote code execution RCE when exploited...
CVE-2021-45877
Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page...
CVE-2022-26209
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setUploadSetting, via the...
CVE-2022-26207
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setDiagnosisCfg, via the...
PT-2022-18168 · Arris · Sbr-Ac1900P +2
Name of the Vulnerable Software and Affected Versions: Arris routers SBR-AC1900P version 1.0.7-B05 Arris routers SBR-AC3200P version 1.0.7-B05 Arris routers SBR-AC1200P version 1.0.5-B05 Description: A command injection issue was discovered in the ddns function of the affected Arris routers. This...
Apple iOS and Apple iPadOS buffer error vulnerabilities
Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in WebKit before Apple iOS 15.4 and iPadOS 15.4, which stems from the fact that processing...
Apple iOS and Apple iPadOS licensing issue vulnerabilities
Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.The vulnerability is caused by an authorization issue in FaceTime prior to Apple iOS 15.4 and iPadOS 15.4, where a user may be ab...
Apple iOS and Apple iPadOS information leakage vulnerabilities
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. An information disclosure vulnerability exists in the Apple iOS and iPadOS Wi-Fi module, which is caused by a malicious...
Apple iOS and Apple iPadOS buffer error vulnerabilities
Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in AVEVideoEncoder in Apple iOS 15.4 and iPadOS before 15.4, which could allow an applicatio...
Apple iOS and Apple iPadOS information leakage vulnerabilities
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. An information disclosure vulnerability exists in Apple iOS and iPadOS WebKit, which originates from processing maliciousl...
Apple iOS and Apple iPadOS licensing issue vulnerabilities
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. An authorization issue exists in the Apple iOS and iPadOS VoiceOver module, where someone with physical access to the iOS...
Multiple Apple products have vulnerabilities related to resource management.
Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.The vulnerability is due to a resource management error in WebKit prior to Apple iOS 15.4 and iPadOS 15.4. A resource management...
CVE-2022-25621
UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.2.11 and prior, UNIVERGE WA 2020 Ver8.2.11 and prior, UNIVERGE WA 2021 Ver8.2.11 and prior, UNIVERGE WA 2610-AP Ver8.2.11 and prior, UNIVERGE WA 2611-AP Ver8.2....
CVE-2022-23731
V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...
CVE-2022-23731
V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...
