6885 matches found
Hardcoded credentials
Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the 1 debug, 2 prod, 3 do160, and 4 flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line...
CVE-2014-2964
Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the 1 debug, 2 prod, 3 do160, and 4 flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line...
Qemu: usb: fix up post load checks
hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."...
IBM GCM1632 1.20.0.22575 - Multiple Vulnerabilities
IBM GCM1632 1.20.0.22575 - Multiple Vulnerabilities Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and...
IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities
Exploit for php platform in category web applications Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and...
Linux <= 2.6.37-rc1 serial_multiport_struct Local Info Leak Exploit
No description provided by source. / Linux = 2.6.37-rc1 serialmultiportstruct Info Leak Exploit ./splitmilk2 leak 134514859 \m/ Linux = 2.6.37-rc1 serialmultiportstruct Info Leak Exploit \m/ by Todor Donev x Leakfile : leak x Reservedsize : 134514859 + Leaking.. = ... Greets to prdelka, for...
Blade API Monitor Unicode Bypass (Serial Number BOF)
No description provided by source. !/usr/bin/python -w --------------------------------------------------------------------------------- Exploit: Blade API Monitor Unicode Bypass Serial Number BOF Author: b33f Ruben Boonen - http://www.fuzzysecurity.com http://www.fuzzysecurity.com/exploits/8.htm...
Linux <= 2.6.37-rc1 serial_core TIOCGICOUNT Leak Exploit
No description provided by source. / Linux = 2.6.37-rc1 serialcore TIOCGICOUNT leak ================================================ Information leak exploit for CVE-2010-4077 which leaks kernel stack space back to userland due to uninitialized struct member reserved in struct serialicounterstruc...
Serial port shell binding, busybox Launching shellcode
No description provided by source. / General: Serial port shell binding, busybox launching shellcode.. yey! Specific: really wish i could tell you what i needed this for.. but meh.. this will bind a busybox sh shell to /dev/ttyS0, the shellcode does not alter the baudrate settings.. 9600 is the...
openSUSE Security Update : qemu (openSUSE-SU-2014:0200-1)
Running QEMU in a configuration with more than 256 emulated SCSI devices attached could have caused a buffer overflow when the guest issues a REPORT LUNS command. Fix this as part of upgrading to the latest stable version on 13.1. Also fix unintentional building against gtk2 rather than gtk3 on...
Qemu: usb: fix up post load checks
hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."...
qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load
The usbdevicepostload function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setuplen or setupindex value...
qemu: virtio: insufficient validation of num_sg when mapping
The virtqueuemapsg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read...
qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load
The usbdevicepostload function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setuplen or setupindex value...
Qemu: usb: fix up post load checks
hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."...
Design/Logic Flaw
COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...
CVE-2014-2346 COPA-DATA zenon DNP3 Improper Input Validation
COPA-DATA zenon DNP3 NG driver DNP3 master 7.10 and 7.11 through 7.11 SP0 build 10238 and zenon DNP3 Process Gateway DNP3 outstation 7.11 SP0 build 10238 and earlier allow physically proximate attackers to cause a denial of service infinite loop and process crash via crafted input over a serial...
CVE-2014-2346
The CVE-2014-2346 issue affects COPA-DATA zenon DNP3 NG driver (DNP3 master) and zenon DNP3 Process Gateway (DNP3 outstation). Affected versions are zenon DNP3 NG driver (7.10 SP0 up to 7.11 SP0 build 10238) and zenon DNP3 Process Gateway (7.11 SP0 build 10238 and prior). The root cause is improp...
COPA-DATA Patches DNP3 SCADA Vulnerability
A vulnerability exists in a particular brand of SCADA software that if left unpatched, could trigger a denial of service condition and go on to compromise the software’s communication connections, resulting in system instability. The problem is an improper input validation vulnerability and exist...
CVE-2014-2343
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service excessive data processing via a crafted DNP request over a serial line...