CVE-2023-23325

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter...

CVE-2023-23325

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter...

Zumtobel Netlink CCD Onboard Security Breach

The Zumtobel Netlink CCD Onboard is a gateway control unit device from Zumtobel Austria. A security vulnerability exists in the Zumtobel Netlink CCD Onboard 3.74 onboard version 3.80 firmware version, which originates when the system contains hard-coded credentials for the administrator account...

Zumtobel Netlink CCD Onboard Security Breach

The Zumtobel Netlink CCD Onboard is a gateway control unit device from Zumtobel Austria. A security vulnerability exists in Zumtobel Netlink CCD Onboard firmware version 3.80, which originates from a command injection via the NetHostname parameter...

PT-2023-18906

Name of the Vulnerable Software and Affected Versions Zumtobel Netlink CCD Onboard versions 3.74 through 3.79 Description The issue concerns hardcoded credentials for the Administrator account. Recommendations For Zumtobel Netlink CCD Onboard versions 3.74 through 3.79, update to Firmware 3.80 or...

PT-2023-19518

Name of the Vulnerable Software and Affected Versions Zumtobel Netlink CCD Onboard version 3.74 Description A buffer overflow issue was discovered in the NetlinkWeb::Information::SetDeviceIdentification component. This issue affects the specified version of the Zumtobel Netlink CCD Onboard...

CVE-2023-24294

The CVE-2023-24294 entry affects Zumtobel Netlink CCD Onboard: firmware v3.80 on the v3.74-released package is vulnerable due to a buffer overflow in NetlinkWeb::Information::SetDeviceIdentification. The issue, as described in multiple sources, is rooted in that specific component, potentially im...

PT-2023-18907

Name of the Vulnerable Software and Affected Versions Zumtobel Netlink CCD Onboard versions 3.74 through 3.79 Description A command injection issue was discovered via the NetHostname parameter. This allows for potential exploitation. Recommendations For Zumtobel Netlink CCD Onboard versions 3.74...

Zumtobel Netlink CCD Onboard Security Breach

The Zumtobel Netlink CCD Onboard is a gateway control unit device from Zumtobel Austria. A security vulnerability exists in the Zumtobel Netlink CCD Onboard 3.74 onboard version 3.80 firmware version, which originates from a component containing a buffer overflow...

CVE-2023-23325

CVE-2023-23325 affects Zumtobel Netlink CCD Onboard firmware versions 3.74–3.79; a command-injection flaw is triggered via the NetHostname parameter. The issue originates in firmware prior to 3.80, with the fixed version being 3.80 or later. Impact details in the public record indicate high confi...

CVE-2023-23324

CVE-2023-23324 affects Zumtobel Netlink CCD Onboard: vulnerable in firmware 3.80 with prior 3.74—3.79 releases. The root cause is hardcoded administrator credentials embedded in the device, enabling unauthorized admin access if exploited. Documented impact is severe (admin-level access could lead...

USN-6520-1: Linux kernel (StarFive) vulnerabilities

Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrary code. CVE-2023-25775 Yu Hao and...

USN-6520-1 linux-starfive-6.2 vulnerabilities

Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrary code. CVE-2023-25775 Yu Hao and...

Ubuntu: Security Advisory (USN-6516-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6516-1 linux-intel-iotg, linux-intel-iotg-5.15 vulnerabilities

Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrary code. CVE-2023-25775 Yu Hao and...

USN-6516-1: Linux kernel (Intel IoTG) vulnerabilities

Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrary code. CVE-2023-25775 Yu Hao and...

CVE-2023-5972 Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

kernel: net: genl: fix error path memory leak in policy dumping

A flaw was found in the netlink driver in the Linux kernel. A memory leak can occur when allocated memory is not released in certain error cases, potentially impacting system performance and resulting in a denial of service...

Ubuntu: Security Advisory (USN-6465-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6465-3 linux-gke vulnerabilities

Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in the Linux kernel contained a race condition, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2023-31083 Lin Ma discovered that the Netlink...