Lucene search
+L

153 matches found

OSV
OSV
added 2024/06/19 3:15 p.m.24 views

CVE-2021-47609

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpipd-name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name...

7.8CVSS9.1AI score
SaveExploits0References7
OSV
OSV
added 2024/06/19 3:15 p.m.11 views

UBUNTU-CVE-2021-47609

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpipd-name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name...

7.8CVSS6.4AI score0.0026EPSS
SaveExploits0References10
CVE
CVE
added 2024/06/19 2:57 p.m.168 views

CVE-2021-47609

CVE-2021-47609 : Linux kernel vulnerability in the SCPI genpd driver for arm SCPI firmware. The issue was a missing bound check on scpi_pd->name, which could overflow a 30-byte buffer when copying the device name, potentially leading to memory corruption. The fix allocates the string dynamical...

7.8CVSS8.5AI score0.0026EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2024/06/19 2:57 p.m.44 views

CVE-2021-47609 firmware: arm_scpi: Fix string overflow in SCPI genpd driver

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpipd-name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name...

0.0026EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2024/06/19 2:57 p.m.13 views

CVE-2021-47609 firmware: arm_scpi: Fix string overflow in SCPI genpd driver

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpipd-name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name...

7.3AI score0.0026EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2023/11/07 9:03 a.m.14 views

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

7.8CVSS6.3AI score0.00182EPSS
SaveExploits0References5
OSV
OSV
added 2023/06/16 4:15 p.m.11 views

CVE-2023-25366

In Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS, insecure SCPI interface discloses web password...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits0References2
NVD
NVD
added 2023/06/16 4:15 p.m.35 views

CVE-2023-25366

In Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS, insecure SCPI interface discloses web password...

9.8CVSS9.5AI score0.00408EPSS
SaveExploits0References2
Prion
Prion
added 2023/06/16 4:15 p.m.22 views

Design/Logic Flaw

In Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS, insecure SCPI interface discloses web password...

7.5CVSS9.4AI score0.00408EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/06/16 12:00 a.m.54 views

CVE-2023-25366

CVE-2023-25366 affects Siglent SDS 1104X-E (SDS1xx4X-E_V6.1.37R9.ADS). The issue is an insecure SCPI interface that discloses the web password, exposing authentication credentials and potentially enabling unauthorized access to the device. No exploitation details are provided in the connected doc...

9.8CVSS9.4AI score0.00408EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/06/16 12:00 a.m.42 views

CVE-2023-25366

In Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS, insecure SCPI interface discloses web password...

9.7AI score0.00408EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/06/16 12:00 a.m.12 views

CVE-2023-25366

In Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS, insecure SCPI interface discloses web password...

7AI score0.00408EPSS
SaveExploits0References2
NVD
NVD
added 2023/06/14 8:15 p.m.31 views

CVE-2023-25369

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command...

7.5CVSS7.5AI score0.00845EPSS
SaveExploits1References1
Prion
Prion
added 2023/06/14 8:15 p.m.15 views

Command injection

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command...

5CVSS7.5AI score0.00845EPSS
SaveExploits1References1Affected Software3
ATTACKERKB
ATTACKERKB
added 2023/06/14 5:15 p.m.2 views

CVE-2023-25367

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution RCE with SCPI interface or web server...

9.8CVSS6AI score0.0172EPSS
SaveExploits1References3
NVD
NVD
added 2023/06/14 5:15 p.m.35 views

CVE-2023-25367

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution RCE with SCPI interface or web server...

9.8CVSS9.8AI score0.0172EPSS
SaveExploits1References2
Prion
Prion
added 2023/06/14 5:15 p.m.27 views

Design/Logic Flaw

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution RCE with SCPI interface or web server...

7.5CVSS9.6AI score0.0172EPSS
SaveExploits1References2Affected Software3
CVE
CVE
added 2023/06/14 12:00 a.m.70 views

CVE-2023-25367

CVE-2023-25367 affects Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS. The issue is unfiltered user input allowing Remote Code Execution via the SCPI interface or web server. Root cause: insufficient input validation and, in some sources, lack of authentication on the SCPI interface, enabling remot...

9.8CVSS9.6AI score0.0172EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/14 12:00 a.m.10 views

CVE-2023-25367

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution RCE with SCPI interface or web server...

9.8AI score0.0172EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/06/14 12:00 a.m.39 views

CVE-2023-25369

Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command...

7.7AI score0.00845EPSS
SaveExploits1References1
Rows per page
Query Builder