PT-2018-13199

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 Description The issue is related to improper error handling, which could be exploited by an unauthenticated attacker with physical access to the system to gain access to the u-boot shell...

Philips HealthSuite Health Android App

1. EXECUTIVE SUMMARY CVSS v3 3.5 ATTENTION: Low skill level to exploit Vendor: Philips Equipment: Philips HealthSuite Health Android App Vulnerability: Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker with physical access to...

CVE-2018-15773

Dell Encryption formerly Dell Data Protection | Encryption v10.1.0 and earlier contain an information disclosure vulnerability. A malicious user with physical access to the machine could potentially exploit this vulnerability to access the unencrypted RegBack folder that contains back-ups of...

CVE-2018-15773: Exposure of Sensitive Information to an Unauthorized Actor

Dell Encryption formerly Dell Data Protection | Encryption v10.1.0 and earlier contain an information disclosure vulnerability. A malicious user with physical access to the machine could potentially exploit this vulnerability to access the unencrypted RegBack folder that contains back-ups of...

Default credentials

ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...

CVE-2018-19795

ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...

CVE-2018-19795

ChipsBank UMPTool stores passwords in NAND using a simple substitution cipher, enabling full device access if an attacker has physical access. The vulnerability arises from weak password handling (insecure storage of credentials) and grants high impact to confidentiality, integrity, and availabil...

CVE-2018-19795

ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...

PT-2018-15097

Name of the Vulnerable Software and Affected Versions ChipsBank UMPTool affected versions not specified Description The issue concerns the storage of passwords in the NAND using a simple substitution cipher. This allows attackers to gain full access to the device when they have physical access to...

CVE-2018-19795: Insufficiently Protected Credentials

ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device...

Intel DCI Policy Update - US

Lenovo Security Advisory: LEN-23611 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3652 Summary Description: Intel is releasing Direct Connect Interface DCI policy update. Existing UEFI setting restrictions for...

Intel DCI Policy Update - Lenovo Support US

No description provided...

CVE-2018-18203: Improper Verification of Cryptographic Signature

A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker with physical access to the vehicle's USB ports the ability to rewrite the firmware of the head unit. This occurs because the device accepts modified QNX6 filesystem images as lo...

Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2

Microsoft patched a zero-day vulnerability that enabled attackers to escalate privileges on targeted systems, which include Windows 7, Server 2008 and Server 2008 R2 systems. The vulnerability, rated important, was part of Microsoft’s Patch Tuesday November security bulletin, which included 62...

Servicing stack update for Windows Server, version 1803 and Windows 10, version 1803: November 13, 2018

None None...

BitLocker Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption. An attacker with physical access to a powered off system could exploit this vulnerability to gain access to encrypted data. To exploit the vulnerability, an attacker must gain physical...

KB4465664 BitLocker Security Feature Bypass Vulnerability

The remote Windows host is missing security update 4465664. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption. An attacker with physical access to a powered off system could exploi...

CVE-2018-17931

If an attacker has physical access to the VGo Robot Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected they may be able to alter scripts, which may allow code execution with root privileges...

CVE-2018-17931

If an attacker has physical access to the VGo Robot Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected they may be able to alter scripts, which may allow code execution with root privileges...

Remote code execution

If an attacker has physical access to the VGo Robot Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected they may be able to alter scripts, which may allow code execution with root privileges...