4632 matches found
Vivo Fibra Askey RTF8225VW Command Execution
--- Exploit 1 Documentation on the Vivo Fibra Modem Exploit I discovered an exploit that allows access to the sh shell on the Vivo Fibra modem. This method essentially involves terminating the aspsh shell and invoking sh using the output of cat /dev/null. Using the pipe | is crucial for this...
ABB Cylon Aspect 3.08.00 dialupSwitch.php Remote Code Execution
ABB Cylon Aspect 3.08.00 dialupSwitch.php Remote Code Execution Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.00 Summary: ASPECT is an award-winning scalable building energy management an...
CVE-2024-45184: Buffer Copy without Checking Size of Input
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with chipset Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, and Modem 5300. A USAT out-of-bounds write due to a heap buffer overflow can lead to a...
CVE-2024-20094
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535...
CVE-2024-20094
A security vulnerability exists in the Modem module of MediaTek chips due to a missing bounds check . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . Exploitation does not require additional execution privileges or user interaction. Remediation is addressed ...
CVE-2024-20094
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535...
CVE-2024-20094
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535...
CVE-2024-20094: Reachable Assertion
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535...
MediaTek 芯片 安全漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the Modem module, which may crash the system...
PT-2024-19853
Name of the Vulnerable Software and Affected Versions MSM module affected versions not specified Description The issue involves memory corruption when invoking IOCTL calls for the MSM module from user space during audio playback and record. This occurs due to improper handling of IOCTL calls,...
PT-2024-18581
Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a missing bounds check in the Modem, which could lead to a system crash and result in a remote denial of service. No additional execution privileges are needed for...
PUB-A-322820753
In mmGetMobileIdIndexForNsUpdate of mmGmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-319834067
there is a possible Null Pointer Dereference modem crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
VulnCheck KEV: CVE-2023-43478
fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution ...
Zabbix universal monitoring system Command Injection
The vulnerability of the Zabbix universal monitoring system lies in the execution of test SMS messages, by providing a specially created phone number, and executing additional AT commands on the modem. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute addition...
CVE-2024-25074
The CVE-2024-25074 issue affects Samsung Semiconductor Mobile Processor and Modem lines, including Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/1330/9110/W920/W930 and Modems 5123 and 5300. The root cause is that the baseband software does not properly check a pointer provided by the Ses...
CVE-2024-25074
An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300. The...
CVE-2024-23358
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem...