CVE-2019-2289

CVE-2019-2289 involves a lack of integrity check that allows a MODEM to accept arbitrary NAS messages, potentially causing authentication bypass of NAS on Snapdragon-based devices (e.g., Snapdragon Auto, Compute, IoT variants across APQ and MSM families). The description lists an extensive set of...

GSNDCP Module Buffer Overflow Vulnerability in Multiple Qualcomm Products

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The SDX24 is a modem.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU...

Compal Broadband CH7465LG modem path traversal vulnerability

The Compal Broadband CH7465LG modem is a modem from Compal Computer Industries Compal of Taiwan, China. A path traversal vulnerability exists in the web interface of the Compal Broadband CH7465LG modem CH7465LG-NCIP-6.12.18.25-2p6-NOSH version, which arises from a failure of a networked system or...

CVE-2019-17224

The web interface of the Compal Broadband CH7465LG modem version CH7465LG-NCIP-6.12.18.25-2p6-NOSH is vulnerable to a /%2f/ path traversal attack, which can be exploited in order to test for the existence of a file pathname outside of the web root directory. If a file exists but is not part of th...

Path traversal

The web interface of the Compal Broadband CH7465LG modem version CH7465LG-NCIP-6.12.18.25-2p6-NOSH is vulnerable to a /%2f/ path traversal attack, which can be exploited in order to test for the existence of a file pathname outside of the web root directory. If a file exists but is not part of th...

CVE-2019-17224

The CVE-2019-17224 entry concerns the web interface of the Compal Broadband CH7465LG modem (version CH7465LG-NCIP-6.12.18.25-2p6-NOSH). A /%2f/ path traversal vulnerability could be exploited to probe for files outside the web root. Behavior observed in the description: if a file exists but is no...

PT-2019-13870 · Mitsubishi · Me-Rtu

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description: An issue allows an attacker to inject malicious code directly into the application through stored cross-site...

CVE-2019-13025

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST HTTP request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable mod...

Input validation

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST HTTP request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable mod...

CVE-2019-13025

Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST HTTP request containing shell commands, which will be executed on the device, to an backend API endpoint of the cable mod...

CVE-2019-10538

Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

CVE-2019-10538

Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

CVE-2019-10538

CVE-2019-10538 is a Qualcomm Qualcomm WLAN/modem/Linux-kernel-driver issue caused by a lack of check of address range received from firmware, allowing the modem to respond with arbitrary pages into the HLOS address space and potentially compromise the device OS. Affected stack includes Snapdragon...

More SIM Cards Vulnerable to Simjacker Attack Than Previously Disclosed

In case you missed it. SimJacker vulnerability is concerning because it can be executed: ➡️ against mass audience, ➡️ against devices manufactured by any vendor, ➡️ with just a $10 GSM modem, ➡️ and there's nothing much affected users can do. Details — https://t.co/BPApXsNghe...

More SIM Cards Vulnerable to Simjacker Attack Than Previously Disclosed

In case you missed it. SimJacker vulnerability is concerning because it can be executed: ➡️ against mass audience, ➡️ against devices manufactured by any vendor, ➡️ with just a $10 GSM modem, ➡️ and there's nothing much affected users can do. Details — pic.twitter.com/ByXhMGB0Hl...

Information Leakage

docker-modem is vulnerable to information leakage. The optionf variable in the function Modem.prototype.dial is not properly handled and used in the buildRequest function, causing a leakage of header information which may contain confidential information...

New SIM Card Flaw Lets Hackers Hijack Any Phone Just By Sending SMS

Cybersecurity researchers today revealed the existence of a new and previously undetected critical vulnerability in SIM cards that could allow remote attackers to compromise targeted mobile phones and spy on victims just by sending an SMS. Dubbed "SimJacker," the vulnerability resides in a...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20152)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. Multiple Qualcomm products are vulnerable to input validation errors, and no detailed vulnerability detail...

ZTE ZXHN F670 Command Injection Vulnerability

The ZTE ZXHN F670 is a modem from China's ZTE Corporation ZTE. A command injection vulnerability exists in the ZTE ZXHN F670. An attacker can exploit this vulnerability to execute illegal commands...

Fedora Update for mgetty FEDORA-2019-732b5488c2

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...