CVE-2024-35952 drm/ast: Fix soft lockup

In the Linux kernel, the following vulnerability has been resolved: drm/ast: Fix soft lockup There is a while-loop in astdpsetonoff that could lead to infinite-loop. This is because the register, VGACRI-Dx, checked in this API is a scratch register actually controlled by a MCU, named DPMCU, in BM...

CVE-2024-35952

CVE-2024-35952 concerns the Linux kernel: a hard-to-reproduce soft-lockup was caused by a loop in ast_dp_set_on_off() that could infinite-loop because VGACRI-Dx scratch registers—actually MCU-controlled by DPMCU in the BMC—are protected by scu-lock. If scu-lock is enabled, DPMCU cannot update the...

GSD-2023-1001188 platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register()

platform/x86: intelscuipc: fix possible name leak in intelscuipcregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000812 platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register()

platform/x86: intelscuipc: fix possible name leak in intelscuipcregister This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2022-1006796 clk: imx: scu: fix memleak on platform_device_add() fails

clk: imx: scu: fix memleak on platformdeviceadd fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

Remote Code Execution (RCE)

scu-captcha is vulnerable to remote code execution. An attacker can inject and execute malicious code through the malicious request packages as the library does not properly remove malicious packages from many mirror sites...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

PYSEC-2022-43166

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

PYSEC-2022-43166

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

CVE-2022-34983

CVE-2022-34983 affects the PyPI package scu-captcha, versions 0.0.1–0.0.4, where a backdoor inserted by a third party enables code execution. Multiple sources (Veracode) describe the impact as remote code execution and note the library can execute malicious code via tampered packages on mirrors. ...

SCU-Captcha 安全漏洞

SCU-Captcha is the SCU JWC CAPTCHA recognition model, based on Pytorch, which has been released on PYPI. A security vulnerability exists in SCU-Captcha that stems from the presence of a code execution backdoor inserted by a third party...

CVE-2022-2120

OFFIS DCMTK's All versions prior to 3.6.7 service class user SCU is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution...

Schneider Electric Magelis SCU HMISCU8A5 Control Panel Detection

Binary data 751184.prm...

Schneider Electric Magelis SCU HMISBC Control Panel Detection

Binary data 751188.prm...

Schneider Electric Magelis SCU HMISCU8B5 Control Panel Detection

Binary data 751186.prm...

Schneider Electric Magelis SCU HMISCU6B5 Control Panel Detection

Binary data 751185.prm...

Schneider Electric Magelis SCU HMISAC Control Panel Detection

Binary data 751187.prm...

Schneider Electric Magelis SCU HMISCU6A5 Control Panel Detection

Binary data 751183.prm...

DLL Hijacking Vulnerability in GE iFix scu.exe Component

GE Intelligent Platforms' GE-IP iFIX is the world's leading industrial automation software solution that provides process visualization, data acquisition and data monitoring of manufacturing operations. A DLL hijacking vulnerability exists in the GE iFix scu.exe component, which can be exploited ...