Path traversal

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12...

Out-of-bounds

in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read...

Out-of-bounds

in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read...

Code injection

Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allows Privilege Escalation.This issue affects Automation Studio: from 4.6.0 through 4.6.X, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP...

Integer overflow

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow...

Privilege escalation

in OpenHarmony v3.2.4 and prior versions allow an adjacent attacker arbitrary code execution through out-of-bounds write...

Integer overflow

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow...

Input validation

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input...

Input validation

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input...

Double free

in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free...

Heap overflow

Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported...

CVE-2020-24681

The CVE-2020-24681 entry concerns an Incorrect Permission Assignment for Critical Resource that enables Privilege Escalation in B&R Industrial Automation Automation Studio. Affected products/versions include Automation Studio 4.6.0–4.6.X, 4.7.0–4.7.7 SP, 4.8.0–4.8.6 SP, and 4.9.0–4.9.4 SP. Root c...

CVE-2024-23978

CVE-2024-23978 affects HOME SPOT CUBE2 (V102 and earlier). The root cause is a heap-based buffer overflow triggered by processing invalid values, potentially allowing arbitrary code execution. The product is no longer supported, and the provided documents do not list a public fix. Some sources su...

CVE-2024-21780

CVE-2024-21780 affects HOME SPOT CUBE2 (V102 and earlier). The vulnerability is a stack-based buffer overflow triggered by processing a specially crafted command, leading to a denial of service (DoS). The available documents confirm the issue but do not provide explicit exploit details or a teste...

CVE-2024-21851

CVE-2024-21851 affects OpenHarmony v4.0.0 and earlier, with a heap overflow caused by an integer overflow. The CVE description indicates the issue relates to Dsoftbus and is exploitable only locally (no user interaction required) with a low-privilege context; available exploit details are not pro...

CVE-2024-0285

CVE-2024-0285 affects OpenHarmony (Dsoftbus) v4.0.0 and earlier. The vulnerability arises from improper input validation in the Dsoftbus component, allowing a local attacker to trigger a denial of service. NVD notes a local attack vector with medium base score and high availability impact; OpenHa...

CVE-2023-45734

CVE-2023-45734 affects OpenHarmony v3.2.4 and earlier, with the Dsoftbus component vulnerable to an out-of-bounds write that enables an adjacent attacker to execute arbitrary code. The issue is documented across multiple feeds (e.g., Red Hat, CVE lists) and is characterized by a high-impact vecto...

CVE-2024-21860

CVE-2024-21860 affects OpenHarmony versions 4.0.0 and earlier. The publicly documented issue is a use-after-free in Dsoftbus that enables an adjacent attacker to execute arbitrary code in any application. The impact is described as high across confidentiality, integrity, and availability in at le...

CVE-2024-21845

CVE-2024-21845 affects OpenHarmony up to and including v4.0.0. A local attacker can trigger a heap overflow due to an integer overflow in Dsoftbus-related functionality, as described in multiple sources. The vulnerability impact is described as high in CVSS terms, with local access required and n...

CVE-2023-43756

OpenHarmony prior to and including v3.2.4 is affected by a local information-leak due to an out-of-bounds read in the Dsoftbus component. The CVE entry documents OpenHarmony v3.2.4 and earlier as vulnerable, with exploitation requiring local access and resulting in confidentiality impact. Remedia...