Lucene search
+L

225 matches found

Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.7 views

PT-2023-10593 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer...

9.9CVSS8.9AI score0.00673EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.9 views

PT-2023-10595 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub. Specially crafted commands sent through the PubNub service can cause a...

9.9CVSS8.8AI score0.00673EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.9 views

PT-2023-10596 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer...

9.9CVSS9AI score0.00673EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.5 views

PT-2023-10591 · Unknown · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer...

9.9CVSS8.8AI score0.00673EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.8 views

PT-2023-10594 · Unknown · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub. Specially crafted commands sent through the PubNub service can cause a...

9.9CVSS8.9AI score0.00673EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.8 views

PT-2023-10597 · Unknown · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub. Specially crafted commands sent through the PubNub service can cause a...

9.9CVSS8.8AI score0.00673EPSS
Exploits0References4
NVD
NVD
added 2022/10/20 5:15 p.m.15 views

CVE-2020-9285

Some versions of Sonos One 1st and 2nd generation allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device...

6.8CVSS0.00469EPSS
Exploits1References1
Prion
Prion
added 2022/10/20 5:15 p.m.21 views

Code injection

Some versions of Sonos One 1st and 2nd generation allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device...

4.6CVSS6.6AI score0.00469EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/10/20 12:0 a.m.8 views

Sonos 安全漏洞

Sonos is an ultimate wireless home audio system from Sonos. Sonos suffers from a security vulnerability that stems from allowing access to some or all of its memory through attacker-controlled hardware that can be connected to the Mini-PCI Express slot on the device's motherboard that hosts the...

6.8CVSS6.7AI score0.00469EPSS
Exploits1References2
CVE
CVE
added 2022/10/20 12:0 a.m.58 views

CVE-2020-9285

The CVE-2020-9285 entry concerns Sonos One (1st and 2nd generation). Affected component: hardware in the Mini-PCI Express slot that hosts the WiFi card. Root cause: attacker-controlled hardware connected to the slot enables partial or full memory access. Impact: potential confidentiality, integri...

6.8CVSS6.5AI score0.00469EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/20 12:0 a.m.9 views

CVE-2020-9285

Some versions of Sonos One 1st and 2nd generation allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device...

6.5AI score0.00469EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/10/20 12:0 a.m.9 views

PT-2022-9075 · Sonos · Sonos One

Name of the Vulnerable Software and Affected Versions: Sonos One versions 1st and 2nd generation Description: The issue allows partial or full memory access via attacker-controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard, which hosts the WiFi card on the...

6.8CVSS6.4AI score0.00469EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/10/20 12:0 a.m.23 views

CVE-2020-9285

Some versions of Sonos One 1st and 2nd generation allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device...

6.5AI score0.00469EPSS
Exploits1References1
NVD
NVD
added 2022/02/18 8:15 p.m.18 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS0.04085EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.5 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

9.8CVSS6.2AI score0.04085EPSS
Exploits0References2
OSV
OSV
added 2022/02/18 8:15 p.m.4 views

CVE-2022-24046

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anacapd...

8.8CVSS7.6AI score0.04085EPSS
Exploits0References1
OSV
OSV
added 2022/02/18 8:15 p.m.7 views

CVE-2022-24049

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec...

9.8CVSS7.7AI score0.07212EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.4 views

CVE-2022-24049

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec...

10CVSS6.4AI score0.07212EPSS
Exploits0References2
NVD
NVD
added 2022/02/18 8:15 p.m.20 views

CVE-2022-24049

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec...

10CVSS0.07212EPSS
Exploits0References1
Prion
Prion
added 2022/02/18 8:15 p.m.20 views

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 S2 systems and 11.2.13 build 57923290 S1 systems. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec...

10CVSS9.7AI score0.07212EPSS
Exploits0References1Affected Software2
Rows per page
Query Builder