9422 matches found
Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot (CVE-2019-1589)
A vulnerability in the Trusted Platform Module TPM functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, local attacker with physical access to view sensitive information on an affected device. The...
CVE-2023-3786
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...
CVE-2023-3786
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...
Improper access control
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...
CVE-2023-3786 Aures Komet Kiosk Mode access control
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...
PT-2023-26147 · Aures · Aures Komet
Name of the Vulnerable Software and Affected Versions: Aures Komet up to 20230509 Description: A problematic issue has been found in Aures Komet, affecting the Kiosk Mode component. This leads to improper access controls. The attack can be launched on the physical device. Recommendations: For Aur...
CVE-2023-21994
Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware component: Android Mobile Authenticator App. Supported versions that are affected are Prior to 11.1.2.3.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communicati...
CVE-2023-21994
Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware component: Android Mobile Authenticator App. Supported versions that are affected are Prior to 11.1.2.3.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communicati...
CVE-2023-30561
The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running...
CVE-2023-30561
The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running...
CVE-2023-30560
The configuration from the PCU can be modified without authentication using physical connection to the PCU...
CVE-2023-30560
The configuration from the PCU can be modified without authentication using physical connection to the PCU...
Authentication flaw
The configuration from the PCU can be modified without authentication using physical connection to the PCU...
CVE-2023-30561
CVE-2023-30561 describes insecure data flow between the BD Alaris PCU and its modules. In BD Alaris PCU Model 8015, v12.1.3 and earlier, the infusion data can be exposed or tampered if a threat actor gains physical access and connects a crafted device during an infusion. BD’s ICS bulletin indicat...
CVE-2023-30560
BD Alaris PCU 8015 (versions 12.1.3 and earlier) exposes a vulnerability (CVE-2023-30560) where the PCU configuration can be modified without authentication by connecting physically to the PCU. The CVSS v3.1 base metrics in public sources indicate AV:P, AC:L, PR:N, UI:N, S:U, with C/H/I/H/A/H, i....
BD Alaris System with Guardrails Suite MX 授权问题漏洞
The BD Alaris System with Guardrails Suite MX is a medical device from BD Medical BD. A security vulnerability exists in the BD Alaris System with Guardrails Suite MX, which originates from the ability to modify the configuration of a PCU without having to authenticate using a physical connection...
PT-2023-22789 · Pcu · Pcu
Name of the Vulnerable Software and Affected Versions: PCU affected versions not specified Description: The issue concerns the insecure data flow between the PCU and its modules. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device whil...
PT-2023-22788 · Pcu · Pcu
Name of the Vulnerable Software and Affected Versions: PCU affected versions not specified Description: The configuration of the PCU can be modified without authentication by establishing a physical connection to the device. Recommendations: At the moment, there is no information about a newer...
Microsoft Guidance for Addressing Security Feature Bypass in Trend Micro EFI Modules
Trend Micro has released CVE-2023-28005 to address a secure boot bypass. Subsequently Microsoft has released the July Windows security updates to block the vulnerable UEFI modules by using the DBX UEFI Secure Boot Forbidden Signature Database disallow list. To exploit this vulnerability, an...