Lucene search
+L

129 matches found

ATTACKERKB
ATTACKERKB
added 2022/08/11 2:15 a.m.4 views

CVE-2022-38161

The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA...

7.5CVSS5.8AI score0.00629EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/11 2:15 a.m.8 views

CVE-2022-38161

The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA...

7.5CVSS5.8AI score0.00629EPSS
SaveExploits0References3
NVD
NVD
added 2022/08/11 2:15 a.m.15 views

CVE-2022-38161

The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA...

7.5CVSS0.00629EPSS
SaveExploits0References3
Prion
Prion
added 2022/08/11 2:15 a.m.22 views

Unrestricted file upload

The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA...

4.3CVSS7.6AI score0.00629EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/08/11 1:36 a.m.27 views

CVE-2022-38161

The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA...

7.8AI score0.00629EPSS
SaveExploits0References3
CVE
CVE
added 2022/08/11 1:36 a.m.69 views

CVE-2022-38161

The CVE-2022-38161 entry concerns the Gumstix Overo SBC on the VSKS board (used in Orlan-10 and others) with risk through 2022-08-09. Concrete detail: an unrestricted remapping of the NOR flash memory that contains the FPGA bitstream is possible, enabling potential integrity/availability risks to...

7.5CVSS7.6AI score0.00629EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.10 views

PT-2022-24248 · Gumstix · Gumstix Overo Sbc

Name of the Vulnerable Software and Affected Versions: Gumstix Overo SBC on the VSKS board through 2022-08-09 Description: The issue allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA, as used on the Orlan-10 and other platforms. Recommendations: For Gumst...

7.5CVSS7.4AI score0.00629EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/08/11 12:00 a.m.9 views

Subreption Gumstix Overo SBC 缓冲区错误漏洞

The Subreption Gumstix Overo SBC is a touch substrate from Subreption USA. A security vulnerability exists in Subreption Gumstix Overo SBC version 2022-08-09 and prior versions, which stems from a vulnerability that allows unrestricted remapping of NOR flash memory containing an FPGA bitstream...

7.5CVSS7.3AI score0.00629EPSS
SaveExploits0References4
OSV
OSV
added 2022/07/01 12:15 a.m.7 views

CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

9.8CVSS5.8AI score0.01277EPSS
SaveExploits0References3
NVD
NVD
added 2022/07/01 12:15 a.m.20 views

CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

9.8CVSS0.01277EPSS
SaveExploits0References3
Prion
Prion
added 2022/07/01 12:15 a.m.21 views

Design/Logic Flaw

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

7.5CVSS9.3AI score0.01277EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2022/06/30 11:28 p.m.27 views

CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

9.6AI score0.01277EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/30 12:00 a.m.7 views

Ampere Computing Ampere Altra 安全漏洞

The Ampere Computing Ampere Altra is an 80-core server processor from Ampere Computing, USA. A security vulnerability exists in the Ampere Computing Ampere Altra that stems from a UEFI-accessible Altra reference design that allows insecure access to the SPI-NOR by operating system/manager...

9.8CVSS8.3AI score0.01277EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/06/30 12:00 a.m.10 views

PT-2022-21213 · Ampere · Ampere Altra Max +1

Name of the Vulnerable Software and Affected Versions: Ampere Altra and AltraMax devices before SRP 1.09 Description: The Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component. Recommendations: For Ampere Altra and AltraMax devices before SRP 1.0...

9.8CVSS9.4AI score0.01277EPSS
SaveExploits0References7
Openbugbounty
Openbugbounty
added 2020/07/26 12:01 p.m.12 views

nor-ig.no Cross Site Scripting vulnerability OBB-1238923

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2020/02/12 4:47 p.m.37 views

format test

TL;DR How does the Tesla update its firmware? What did we find when reverse engineering the display and instrument cluster? Here’s the result of a couple of weeks work, working on a real vehicle that mostly worked after we had finished. Part 1: analysing the hardware, complete with a 14 layer PCB...

7.8AI score
SaveExploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2020/02/12 2:44 p.m.695 views

Reverse Engineering the Tesla Firmware Update Process

TL;DR How does the Tesla Model S update its firmware? What did we find when reverse engineering the display and instrument cluster? Here’s the result of a couple of weeks work, working on a real vehicle that mostly worked after we had finished. Part 1: analysing the hardware, complete with a 14...

7.8AI score
SaveExploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2020/02/12 7:41 a.m.78 views

Reverse Engineering the Tesla Firmware Update Process

TL;DR How does the Tesla update its firmware? What did we find when reverse engineering the display and instrument cluster? Here’s the result of a couple of weeks work, working on a real vehicle that mostly worked after we had finished. Part 1: analysing the hardware, complete with a 14 layer PCB...

7.8AI score
SaveExploits0
Debian CVE
Debian CVE
added 2019/07/27 9:38 p.m.48 views

CVE-2016-10764

In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspisetupflash function. There are CQSPIMAXCHIPSELECT elements in the -fpdata array so the "" should be "=" instead...

9.8CVSS6.2AI score0.03075EPSS
SaveExploits0
OSV
OSV
added 2019/05/22 8:29 p.m.8 views

CVE-2019-6812

A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a confidentiality issue when using FTP protocol...

7.2CVSS7.1AI score0.01165EPSS
SaveExploits0References2
Rows per page
Query Builder