CVE-2019-19563

A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...

CVE-2019-19563

CVE-2019-19563 concerns a misconfiguration in the debug interface of Mercedes-Benz HERMES 2.1. The issue, exploitable by an attacker with direct physical access to the device hardware, could expose cellular modem information. The description across sources confirms the vulnerability is tied to a ...

CVE-2020-3690

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

Code injection

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2020-3690

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2020-3690

CVE-2020-3690 describes that an incorrect SMMU configuration in the modem crypto engine could potentially compromise the hypervisor on Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wired Networking) across listed SoCs (A...

Genexis Platinum-4410 P4410-V2-1.28 Cross Site Request Forgery

Exploit Title: Genexis Platinum-4410 P4410-V2-1.28 - Cross Site Request Forgery to Reboot Date: 10/28/2020 Exploit Author: Mohammed Farhan Vendor Homepage: https://genexis.co.in/product/ont/ Version: Platinum-4410 Software version - P4410-V2-1.28 Tested on: Windows 10 Author Contact:...

Genexis Platinum-4410 P4410-V2-1.28 - Cross Site Request Forgery to Reboot

Exploit Title: Genexis Platinum-4410 P4410-V2-1.28 - Cross Site Request Forgery to Reboot Date: 10/28/2020 Exploit Author: Mohammed Farhan Vendor Homepage: https://genexis.co.in/product/ont/ Version: Platinum-4410 Software version - P4410-V2-1.28 Tested on: Windows 10 Author Contact:...

CVE-2020-25054

An issue was discovered on Samsung mobile devices with software through 2020-04-02 Exynos modem chipsets. There is a heap-based buffer over-read in the Shannon baseband. The Samsung ID is SVE-2020-17239 August 2020...

Heap overflow

An issue was discovered on Samsung mobile devices with software through 2020-04-02 Exynos modem chipsets. There is a heap-based buffer over-read in the Shannon baseband. The Samsung ID is SVE-2020-17239 August 2020...

CVE-2020-25054

The CVE-2020-25054 issue affects Samsung mobile devices with Exynos modem chipsets up to 2020-04-02, involving a heap-based buffer over-read in the Shannon baseband. The entry identifies the Samsung internal ID SVE-2020-17239 (August 2020). Public data in the connected records confirms the vulner...

CVE-2020-25054

An issue was discovered on Samsung mobile devices with software through 2020-04-02 Exynos modem chipsets. There is a heap-based buffer over-read in the Shannon baseband. The Samsung ID is SVE-2020-17239 August 2020...

openSUSE Security Update : hylafax+ (openSUSE-2020-1209)

This update for hylafax+ fixes the following issues : Hylafax was updated to upstream version 7.0.3. Security issues fixed : - CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem boo1173521. - CVE-2020-15397: Sourcing of files into binaries from user...

OPENSUSE-SU-2020:1210-1 Security update for hylafax+

This update for hylafax+ fixes the following issues: Hylafax was updated to upstream version 7.0.3. Security issues fixed: - CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem boo1173521. - CVE-2020-15397: Sourcing of files into binaries from user...

Security update for hylafax+ (moderate)

openSUSE Security Update: Security update for hylafax+ Announcement ID: openSUSE-SU-2020:1210-1 Rating: moderate References: 1173519 1173521 Cross-References: CVE-2020-15396 CVE-2020-15397 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description...

[SECURITY] Fedora 31 Update: hylafax+-7.0.3-1.fc31

HylaFAXtm is a enterprise-strength fax server supporting Class 1 and 2 fax modems on UNIX systems. It provides spooling services and numerous supporting fax management tools. The fax clients may reside on machines different from the server and client implementations exist for a number of platform...

Code injection

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected...

Design/Logic Flaw

An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem...

CVE-2019-20032

An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem...

CVE-2020-12773

A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a default password to execute arbitrary commands remotely via the build-in network monitoring tool...