CVE-2019-5260

The CVE-2019-5260 issue affects Huawei/Honor devices: HUAWEI Y9 2019 and Honor View 20, caused by insufficient input validation when parsing certain TD-SCDMA messages, allowing a rogue base station to trigger a DoS via an infinite loop and device reboot. Public details from multiple sources confi...

CVE-2019-5260

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this...

CVE-2019-5253

Huawei E5572-855 devices with firmware versions earlier than 8.0.1.3 (H335SP1C233) have an improper authentication vulnerability. The device does not perform sufficient authentication for certain operations, and a successful exploit could cause a reboot after a man-in-the-middle attack. Connected...

CVE-2019-5253

E5572-855 with versions earlier than 8.0.1.3H335SP1C233 has an improper authentication vulnerability. The device does not perform a sufficient authentication when doing certain operations, successful exploit could allow an attacker to cause the device to reboot after launch a man in the middle...

Snatch Ransomware Reboots Windows in Safe Mode to Bypass Antivirus

Cybersecurity researchers have spotted a new variant of the Snatch ransomware that first reboots infected Windows computers into Safe Mode and only then encrypts victims' files to avoid antivirus detection. Unlike traditional malware, the new Snatch ransomware chooses to run in Safe Mode because ...

Denial of Service Vulnerability in ZTE ZXR10 1800-2S Routers

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. A denial of service vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to reboot the device and cause a denial of service...

Denial of Service Vulnerability in ZTE ZXR10 1800-2S Router (CNVD-2020-01289)

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. A denial of service vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to reboot the device and cause HTTP and other services to refuse to respond...

Huawei E5572-855 Authorization Issues Vulnerability

The Huawei E5572-855 is a portable wireless router device from Huawei China. An authorization issue vulnerability exists in Huawei E5572-855 prior to version 8.0.1.3 H335SP1C233, which can be exploited by an attacker to cause a device reboot by performing a man-in-the-middle attack...

USN-4182-4 intel-microcode regression

USN-4182-2 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...

USN-4182-3 intel-microcode regression

USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...

Security Advisory - Improper Authentication Vulnerability in Several Products

There is an improper authentication vulnerability in several products. The device does not perform a sufficient authentication when doing certain operation, successful exploit could allow an attacker to cause the device to reboot after launch a man in the middle attack. Vulnerability ID:...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 8 (VA MN: 7.0.2-623, VA Agent: 7.0.2-341)

The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-37429 Need to return userbeancounters stats to VA agent. Vulnerability id: PVA-37434 Unable to reboot VE while changing its RAM/CPU live. Vulnerability id: PVA-37359, PVA-37415, PVA-37438 Other fixes...

F5 BIG-IP Memory Disclosure Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A memory leakage vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to cause a memory leakage, leading t...

Denial of Service Vulnerability in DIGI PortServer TS 1

DIGI's PortServer TS serial server provides a simple, reliable and cost-effective solution for connecting multiple serial devices over industry-standard Ethernet. Target applications include retail/point-of-sale, building control and point-of-care. A denial of service vulnerability exists in...

CVE-2019-18247

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

Denial of service

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

CVE-2019-18247

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

ABB Relion 650 and 670 Series Input Validation Error Vulnerability

The ABB Relion 670 Series and ABB Relion 650 Series are both transmission protection control devices from ABB Switzerland. An input validation error vulnerability exists in the ABB Relion 650 and 670 Series, which can be exploited by an attacker to reboot the device, resulting in a denial of...

ABB Relion 650 and 670 Series CVE-2019-18247 Denial Of Service Vulnerability

Description ABB Relion 650 and 670 Series are prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a device to reboot, denying service to legitimate users. The following versions of ABB Relion series are vulnerable: ABB Relion 650 series versions 1.3.0.5 and prior...

VMware WorkStation 12.5.3 - Virtual Machine Escape Exploit

VMware Escape Exploit VMware Escape Exploit before VMware WorkStation 12.5.3 Host Target: Win10 x64 Compiler: VS2013 Test on VMware 12.5.2 build-4638234 Known issues Failing to heap manipulation causes host process crash. About 50% successful rate Not quite elaborate because I'm not good at doing...