PT-2022-27911 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the reboot type parameter in the wizard ipv6 function, specifically in the sub 41C380 function. Recommendations: For TRENDnet TEW755AP version 1.13B01,...

Security Update Guide Improvement – Representing Hotpatch Updates

Today we are updating the way Microsoft Security Update Guide SUG represents the Windows Hotpatch feature to make it easier for users to identify the hotpatch and security updates. Hotpatching was introduced a year ago as a new way to install updates on supported Windows Server Azure Edition...

CVE-2022-24118

Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6...

Default configuration

Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6...

CVE-2022-24118

CVE-2022-24118 affects GE Renewable Energy MDS radios: iNET/iNET II prior to 8.3.0, SD prior to 6.4.7, TD220X prior to 2.0.16, and TD220MAX prior to 1.2.6. Reported issue: an authentication/code mechanism can trigger a reset to factory default and reboot, constituting an uncontrolled resource con...

CVE-2022-24118

Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6...

CVE-2022-20476

In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20476

In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20476

In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Code injection

In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

UBUNTU-CVE-2022-20476

In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20476

In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-14694 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to the setEnabledSetting function in PackageManager.java, which can cause the device to enter an infinite reboot loop due to resource exhaustion. This can lead ...

Tenda W6-S Denial of Service Vulnerability

Tenda W6-S is a router from Tenda, China.A denial of service vulnerability exists in Tenda W6-S, which can be exploited by attackers to reboot the device and cause a denial of service...

CVE-2022-45498

An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45504

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45504

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

Design/Logic Flaw

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

Design/Logic Flaw

An issue in the component tpisystoolhandle0 /goform/SysToolReboot of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...

CVE-2022-45504

An issue in the component tpisystoolhandle0 /goform/SysToolRestoreSet of Tenda W6-S v1.0.0.4510 allows unauthenticated attackers to arbitrarily reboot the device...