927 matches found
CVE-2022-37418
The CVE-2022-37418 issue concerns the Remote Keyless Entry (RKE) receiving unit used in Nissan, Kia, and Hyundai vehicles through 2017. The vulnerability arises when an attacker captures two consecutive valid key fob signals over the radio, enabling a RollBack replay attack that allows the attack...
CVE-2022-37305
Summary: CVE-2022-37305 affects Honda vehicles up to 2018 and concerns the Remote Keyless Entry (RKE) receiving unit. The root cause is a RollBack-like vulnerability where an attacker, after capturing five consecutive valid RKE signals transmitted over RF, can remotely unlock the vehicle and forc...
CVE-2022-37305
The Remote Keyless Entry RKE receiving unit on certain Honda vehicles through 2018 allows remote attackers to perform unlock operations and force a resynchronization after capturing five consecutive valid RKE signals over the radio, aka a RollBack attack. The attacker retains the ability to unloc...
CVE-2022-36945
The Remote Keyless Entry RKE receiving unit on certain Mazda vehicles through 2020 allows remote attackers to perform unlock operations and force a resynchronization after capturing three consecutive valid key-fob signals over the radio, aka a RollBack attack. The attacker retains the ability to...
CVE-2022-36945
The CVE-2022-36945 entry concerns Mazda vehicles’ Remote Keyless Entry (RKE) receiving unit up to 2020. The root issue is a RollBack attack that, after three consecutive valid key-fob signals, allows a remote attacker to unlock and force resynchronization, with the attacker retaining unlock capab...
PT-2022-23913 · Honda · Honda
Name of the Vulnerable Software and Affected Versions: Honda vehicles through 2018 Description: The issue allows remote attackers to perform unlock operations and force a resynchronization after capturing five consecutive valid RKE signals over the radio, also known as a RollBack attack. This...
Remote Keyless Entry 安全漏洞
Remote Keyless Entry RKE is a system used to remotely lock and unlock a vehicle. A security vulnerability exists in Honda Remote Keyless Entry RKE that stems from allowing a remote attacker to perform an unlock operation and force a resynchronization, known as a rollback attack, after capturing...
CVE-2022-37418: Authentication Bypass by Capture-replay
The Remote Keyless Entry RKE receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform unlock operations and force a resynchronization after capturing two consecutive valid key fob signals over the radio, aka a RollBack attack. The attacker retain...
CVE-2022-36945: Authentication Bypass by Capture-replay
The Remote Keyless Entry RKE receiving unit on certain Mazda vehicles through 2020 allows remote attackers to perform unlock operations and force a resynchronization after capturing three consecutive valid key-fob signals over the radio, aka a RollBack attack. The attacker retains the ability to...
Remote Keyless Entry 安全漏洞
Remote Keyless Entry RKE is a system used to remotely lock and unlock a vehicle. A security vulnerability exists in Nissan, Kia, and Hyundai vehicles Remote Keyless Entry RKE, which stems from a vulnerability that allows a remote attacker to perform an unlock operation and force a resynchronizati...
Remote Keyless Entry 安全漏洞
Remote Keyless Entry RKE is a system used to remotely lock and unlock a vehicle. The Remote Keyless Entry RKE receiving unit on certain Mazda vehicles 2020 and prior versions has a security vulnerability that stems from a vulnerability that allows a remote attacker to perform an unlocking operati...
CVE-2022-37305: Authentication Bypass by Capture-replay
The Remote Keyless Entry RKE receiving unit on certain Honda vehicles through 2018 allows remote attackers to perform unlock operations and force a resynchronization after capturing five consecutive valid RKE signals over the radio, aka a RollBack attack. The attacker retains the ability to unloc...
PT-2022-23693 · Mazda · Mazda Vehicles
Name of the Vulnerable Software and Affected Versions: Mazda vehicles affected versions not specified Description: The issue concerns the Remote Keyless Entry RKE receiving unit, which allows remote attackers to perform unlock operations and force a resynchronization after capturing three...
App Layering - Stuck Tasks or new tasks hang at "pending" or "stalled"
Tasks won't progress, appear as stalled. New tasks sit at "Pending" From maservice.log: 2021-01-11 09:10:25,575 WARN 20193 UnitOfWorkImplemen: Transaction is implicitly being rolled back at Uni.Appliance.PersistenceLayer.UnitOfWork.UnitOfWorkImplementation.Dispose 0x00025 in :0 at...
The vulnerability of the config_rollback() function implementation in the Microprogrammed Software VPN Routers of Robustel R1510 allows a perpetrator to execute arbitrary commands.
The vulnerability of the configrollback function implementation in the Robustel R1510 VPN router software lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands b...
Microsoft Patch Tuesday, July 2022 Edition
Microsoft today released updates to fix at least 86 security vulnerabilities in its Windows operating systems and other software, including a weakness in all supported versions of Windows that Microsoft warns is actively being exploited. The software giant also has made a controversial decision t...
Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51422)
The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the...
GO-2022-0444 Version rollback attack in github.com/theupdateframework/go-tuf
The TUF client is vulnerable to rollback attacks, in which an attacker causes a client to install software older than the software the client previously knew to be available...
CVE-2022-33326
Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...
Robustel R1510 操作系统命令注入漏洞
The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the...