The vulnerability of the built-in software of NETGEAR’s RBK352, RBR350, and RBS350 routers lies in the lack of protection for service data, which allows attackers to exploit this weakness to disclose protected information.

The vulnerability of NETGEAR’s embedded routing software, such as RBK352, RBR350, and RBS350, is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of NETGEAR XR1000 router’s built-in software lies in the lack of protection for service data, which allows attackers to exploit this weakness to disclose protected information.

The vulnerability of NETGEAR XR1000 router’s built-in software lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the built-in software of NETGEAR’s RBK352, RBR350, and RBS350 routers lies in the lack of protection for service data, which allows attackers to exploit this weakness to disclose protected information.

The vulnerability of NETGEAR’s embedded routing software, such as RBK352, RBR350, and RBS350, is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

PT-2022-15910 · Netapp · Storagegrid

Name of the Vulnerable Software and Affected Versions: StorageGRID formerly StorageGRID Webscale versions prior to 11.6.0 Description: The issue allows disabled, expired, or locked external user accounts to access S3 data to which they previously had access. In StorageGRID 11.6.0, the user accoun...

The vulnerability of Windows operating systems, related to the lack of protection for service data, allows attackers to gain unauthorized access to devices.

The vulnerability of Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

The vulnerability of the Windows GDI+ component in Windows operating systems allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Windows GDI+ component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to the device...

The vulnerability of the kvm_s390_guest_sida_op() function in the KVM virtualization subsystem of Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the kvms390guestsidaop function in the KVM virtualization subsystem of Linux operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Authorization

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions. An attacker may gain access to these functions and achieve remote code execution...

PT-2022-1673 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Remote Access Connection Manager. It allows an attacker to obtain sensitive...

PT-2022-1628 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17-rc4 Description: A flaw in the kvm s390 guest sida op function in KVM for s390 in the Linux kernel allows a local attacker with normal user privileges to obtain unauthorized memory write access. This issue ...

The vulnerability of the built-in software for NETGEAR Wi-Fi routers such as AC2100, AC2400, AC2600, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 lies in the insufficient protection of service data. This allows attackers to trigger malfunctions or execute arbitrary codes.

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as AC2100, AC2400, AC2600, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 is related to insufficient protection for service data. Exploiting this vulnerability can allow an...

PT-2022-7387 · Amd · Amd Processors

Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified Description: A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 kernel mode access to bypass the native System Management Mode SMM ROM protections. This...

The vulnerability of the Microsoft Defender for IoT’s threat detection mechanisms, related to the lack of protection for service data, allows attackers to gain unauthorized access to devices.

The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device...

The vulnerability of Cisco Small Business 220 Series Smart Switch microprogramming software lies in the lack of protection for service data. This allows a hacker to gain access to confidential login credentials or alter user passwords within the user account.

The vulnerability of the microprogrammed software of Cisco Small Business 220 Series Smart Switches lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain access to login credentials or reconfigure passwords in the user account...

The vulnerability of the pep_sock_accept function in the Linux operating system’s net/phonet/pep.c file, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the pepsockaccept function in the net/phonet/pep.c file of the Linux operating system kernel is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the GDI+ graphic library in Microsoft Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the GDI+ graphics library in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-6902 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex version 5.0.5 Description: The issue is related to an insecure configuration in the application, which may allow a remote attacker to gather sensitive information about the web application. This is due to insufficient...

The vulnerability of the FSLogix automated control software lies in the lack of protection for service data, allowing a malicious individual to gain unauthorized access to the device.

The vulnerability of the FSLogix automated desktop virtualization control software lies in the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the device...

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to the device...

PT-2021-5673 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to a lack of protection for service data, which could allow a remote attacker to gain unauthorized access to a device. Recommendations: At the moment...