PT-2024-36458 · Quectel · Quectel Bc95-Cnv

Name of the Vulnerable Software and Affected Versions: Quectel BC95-CNV version V100R001C00SPC051 Description: An issue in Quectel BC95-CNV allows attackers to bypass authentication via a crafted NAS message. This enables attackers to elude authentication through a manipulated message...

PT-2024-36457 · Quectel · Quectel Bc25

Name of the Vulnerable Software and Affected Versions: Quectel BC25 version BC25PAR01A06 Description: The issue allows attackers to bypass authentication via a crafted NAS message. It is noted that Quectel disputes this because the issue is in the chipset supply chain and is not localized to one ...

Quectel BC25 安全漏洞

The Quectel BC25 is a high-performance, low-power NB-IoT wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in the Quectel BC25 BC25PAR01A06 version, which originated from a vulnerability that allows an attacker to bypass authentication via a...

CVE-2024-37816

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow...

PT-2024-27763 · Quectel · Quectel Ec25-Eux

Name of the Vulnerable Software and Affected Versions: Quectel EC25-EUX version EC25EUXGAR08A05M1G Description: A stack overflow issue was discovered in the Quectel EC25-EUX. Recommendations: For version EC25EUXGAR08A05M1G, at the moment, there is no information about a newer version that contain...

CVE-2024-37816

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow...

CVE-2024-37816

Quectel EC25-EUX EC25EUXGAR08A05M1G was discovered to contain a stack overflow...

Quectel EC25-EUX 安全漏洞

The Quectel EC25-EUX is a series of LTE Cat 4 IoT modules with LCC form factor from Quectel. A security vulnerability exists in the Quectel EC25-EUX that stems from the inclusion of a buffer overflow vulnerability...

CVE-2024-37816

CVE-2024-37816 affects the Quectel EC25-EUX module (EC25EUXGAR08A05M1G). The issue is a stack overflow in the firmware/component described in multiple sources. CVSSv3.1 vector indicates a Local attack with Low confidentiality, integrity, and availability impact (base score 4.2, Medium). Exploitat...

Fedora 38 : fwupd (2023-48c43df788)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-48c43df788 advisory. This release adds the following features: Add a launchd agent for macOS Add a new security attribute for BIOS capsule updates to be enabled Add functionality...

quectel.com Cross Site Scripting vulnerability OBB-3316834

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-26921

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via qlatfwd...

Command injection

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via qlatfwd...

Quectel AG550QCN 操作系统命令注入漏洞

The Quectel AG550QCN is a chip from China Mobile Communications Quectel. The Quectel AG550QCN suffers from an operating system command injection vulnerability. An attacker can exploit this vulnerability to execute arbitrary commands via qlatfwd...

CVE-2023-26921

CVE-2023-26921 affects the Quectel AG550QCN, enabling OS command injection via ql_atfwd that allows execution of arbitrary commands. The vulnerability is described as critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with network attack vector and no user interaction. Affected component is...

CVE-2023-26921

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via qlatfwd...

CVE-2023-26921

OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via qlatfwd...

The vulnerability of the microprogrammed wireless network adapter software of Lenovo’s Quectel EM05-CE laptops, related to the lack of measures to neutralize special elements, allows a perpetrator to execute arbitrary commands.

The vulnerability of the microprogrammed wireless network adapter Quectel EM05-CE for Lenovo laptops is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows an attacker to execute arbitrary commands by sending...

Quectel Wireless WAN Driver Command Injection Vulnerability - Lenovo Support US

No description provided...

PT-2022-4873 · Quectel · Quectel Em05-Ce

Name of the Vulnerable Software and Affected Versions: Quectel EM05-CE wireless network adapter versions affected versions not specified Description: The issue is related to the microprogram software of Quectel EM05-CE wireless network adapters in Lenovo laptops, which fails to neutralize special...