1291 matches found
CVE-2021-40170
An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed syste...
CVE-2021-40170
An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed syste...
Authentication flaw
An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed syste...
CVE-2021-40170
The CVE-2021-40170 entry describes an RF replay attack in the SecuritasHome Startpaket (HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117). The vulnerability allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals, including disarming an armed system. A...
CVE-2021-40170
An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed syste...
SecuritasHome Startpaket 安全漏洞
SecuritasHome Startpaket is a home security system from the Swedish company Securitas. It is used to provide comprehensive protection against burglary and fire. A security vulnerability exists in SecuritasHome Startpaket HPGW-G 0.0.2.23F BGU-ITR-F1-BDBL.A30.20181117 version, which allows an...
PT-2021-6790 · Mitsubishi · Melsec Iq-R Series Rj71Gf11-T2 +22
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions Mitsubishi Electric MELSEC iQ-R series...
FortiClient EMS - SAML SSO replay attack
An authentication bypass by capture-replay vulnerability CWE-294 in FortiClient EMS may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages...
CLSA-2021-1634925634 Fixed 9 CVEs in squid34
CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack - CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-25097: fix improper input validation allowing HTTP smuggling from trusted client -...
QuickAccManager.sol#send() Potential replay attack
Handle WatchPug Vulnerability details In QuickAccManager.solsend, addressidentity is not included in the txHash, makes it possible to replay the transaction when the same QuickAccount accHash controls multiple Identity. function sendIdentity identity, QuickAccount calldata acc, DualSig calldata...
QuickAccManager.sol Potential replay attack
Handle WatchPug Vulnerability details This issue is possibly duplicate with a previous issue named "Potential replay attack" In QuickAccManager.solsendTxns and QuickAccManager.solsendTransfer, addressidentity is not included in the txHash, makes it possible to replay the transaction on another...
GHSA-VJ62-G63V-F8MF Validity check missing in Frontier
Impact In the newly introduced signed Frontier-specific extrinsic for pallet-ethereum, a large part of transaction validation logic was only called in transaction pool validation, but not in block execution. Malicious validators can take advantage of this to put invalid transactions into a block...
Input validation
Frontier is Substrate's Ethereum compatibility layer. In the newly introduced signed Frontier-specific extrinsic for pallet-ethereum, a large part of transaction validation logic was only called in transaction pool validation, but not in block execution. Malicious validators can take advantage of...
CVE-2021-41138 Validity check for signed Frontier-specific extrinsic not called in block execution
Frontier is Substrate's Ethereum compatibility layer. In the newly introduced signed Frontier-specific extrinsic for pallet-ethereum, a large part of transaction validation logic was only called in transaction pool validation, but not in block execution. Malicious validators can take advantage of...
CVE-2021-41138
CVE-2021-41138 concerns Frontier, Substrate’s Ethereum compatibility layer. A signed Frontier-specific extrinsic for pallet-ethereum caused many validation checks to run only during transaction pool validation, not during block execution, allowing malicious validators to include invalid transacti...
CVE-2021-35067
Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...
Design/Logic Flaw
Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...
CVE-2021-35067
Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...
CVE-2021-35067
CVE-2021-35067 affects Meross MSG100 devices (firmware before 3.2.3). The vulnerability allows an attacker to replay the same data or similar data (e.g., sniffed Close messages and transmit an acceptable Open message), enabling unauthorized state changes. Documents from multiple sources corrobora...