Design/Logic Flaw

The startup process and device configurations of the Abbott ID NOW device, before v7.1, can be interrupted and/or modified via physical access to an internal serial port. Direct physical access is required to exploit...

kernel: Information leak in l2cap_parse_conf_req in net/bluetooth/l2cap_core.c

An information leak vulnerability was found in the Linux kernel's implementation of logical link control and adaptation protocol L2CAP, part of the Bluetooth stack in the l2capparseconfreq function. An attacker with physical access within the range of standard Bluetooth transmission could use thi...

x86/AMD: mismatch in IOMMU quarantine page table levels

ISSUE DESCRIPTION The current setup of the quarantine page tables assumes that the quarantine domain domio has been initialized with an address width of DEFAULTDOMAINADDRESSWIDTH 48 and hence 4 page table levels. However domio being a PV domain gets the AMD-Vi IOMMU page tables levels based on th...

PT-2023-8275 · Unknown +1 · Asp Bootloader +1

Name of the Vulnerable Software and Affected Versions: ASP Bootloader affected versions not specified Description: The issue is related to a Time-of-Check-to-Time-of-Use TOCTOU vulnerability in the ASP Bootloader, which may allow an attacker with physical access to tamper with SPI ROM records aft...

CVE-2023-47262

The startup process and device configurations of the Abbott ID NOW device, before v7.1, can be interrupted and/or modified via physical access to an internal serial port. Direct physical access is required to exploit...

CVE-2023-47262

The Abbott ID NOW vulnerability CVE-2023-47262 affects devices running versions prior to 7.1. The startup process and device configurations can be interrupted or modified through physical access to an internal serial port, requiring direct physical access to exploit. The issue is documented with ...

PT-2023-7308 · Intel · Intel Optane Ssd

Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM SSD affected versions not specified Description: The issue is related to improper access control in the firmware of some IntelR OptaneTM SSD products. This may allow an unauthenticated user to potentially enable information...

AMD EPYC Security Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as "霄龙", which utilizes the Zen microarchitecture. A security vulnerability exists in AMD EPYC, which stems from a TOCTOU in the ASP bootloader that could allow an attacker with physical access to tamper with...

Abbott ID NOW Security Breach

Abbott ID NOW is an instrument-based rapid isothermal system from Abbott USA. A security vulnerability exists in Abbott ID NOW versions prior to 7.1, which originated from a vulnerability that allows an attacker to modify settings by compromising a physical device to access an internal serial por...

PT-2023-17451 · Unknown +1 · Asp Bootloader +1

Name of the Vulnerable Software and Affected Versions: ASP Bootloader affected versions not specified Description: The issue is related to insufficient input validation in the ASP Bootloader, which may allow a privileged attacker with physical access to expose the contents of ASP memory. This cou...

PT-2023-30398 · Abbott · Id Now

Name of the Vulnerable Software and Affected Versions: Abbott ID NOW versions prior to 7.1 Description: The issue allows modification of the startup process and device configurations via physical access to an internal serial port. Direct physical access is required to exploit this issue. Settings...

CVE-2023-47262

The startup process and device configurations of the Abbott ID NOW device, before v7.1, can be interrupted and/or modified via physical access to an internal serial port. Direct physical access is required to exploit...

AMD EPYC Security Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as "Xiao Long", utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC, which stems from Inadequate input validation in the ASP boot loader could allow a privileged attacker with...

CVE-2023-47616

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to get...

Code injection

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to get...

CVE-2023-47616

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to get...

CVE-2023-47616

CVE-2023-47616 affects Telit Cinterion modules (BGS5; EHS5/6/8; PDS5/6/8; ELS61/81; PLS62) with a CWE-200 exposure of sensitive information to an unauthorized actor. The described risk requires physical access to disclose data on the wireless modem module, with no explicit exploit details in the ...

CVE-2023-47612

A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to obtain a...

Xxe

A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to obtain a...

CVE-2023-47612

Telit Cinterion modules (BGS5, EHS5/6/8, PDS5/6/8, ELS61/81, PLS62) have a CWE-552 vulnerability allowing a physically present attacker to obtain read/write access to any files/directories, including hidden ones. Root cause: Files or Directories Accessible to External Parties. Exploitation status...