Design/Logic Flaw

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP...

CVE-2023-33043

The CVE-2023-33043 issue affects Qualcomm embedded platform modem code and causes a transient DoS when a Beam switch request occurs with a non-configured BWP. Root cause per PT-2023-7611 is an incorrect channel division and sub-band switching implementation during a Beam Switching connection, tri...

CVE-2023-33043 Reachable Assertion in Modem

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP...

CVE-2023-33043: Reachable Assertion

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP...

CVE-2023-43454

An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the hostName parameter of the switchOpMode component...

Open vSwitch: Multiple Vulnerabilities

Background Open vSwitch is a production quality multilayer virtual switch. Description Multiple vulnerabilities have been discovered in Open vSwitch. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There i...

Spring Tips: Spring Boot 3.2

Hi, Spring fans! In this installment of Spring Tips, I look at the new Spring Boot 3.2 release, due to drop today, the 23rd of November 2023! 23-11-23! We're diving into the cool new features of Spring Boot 3.2 and Java 21. We'll explore how virtual threads from Project Loom make your code run...

PT-2023-9639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the stdev release function in the Linux kernel, specifically in the drivers/pci/switch/switchtec.c component. It is caused by errors in resource release, which ca...

Siemens SCALANCE Code Execution

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software lies in the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

kernel: AMD: Cross-Thread Return Address Predictions

A flaw was found in HW. When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch, potentially resulting in information disclosure...

Security Vulnerability in WAGO Industrial Managed Switch

WAGO Industrial Managed Switch is a series of industrial Ethernet switches from WAGO, Germany. A security vulnerability exists in the WAGO Industrial Managed Switch that originates from allowing an unauthenticated, remote attacker to inject arbitrary system commands and gain full system control...

Extreme Networks EXOS Security Vulnerability

Extreme Networks EXOS is a software or network operating system used in a network switch from Extreme Networks USA. Extreme Networks EXOS has a security vulnerability that originates when an attacker sends a malicious BGP update message packet that can trigger a denial of service...

Moxa PT-G503 Cookie Access

The vulnerability of Moxa PT-G503 Ethernet switches’ microprogramming software is related to the use of cookies for storing confidential information without the HttpOnly flag. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Rockwell Automation Stratix Denial of Service Long Control Packet Message (CVE-2015-7855)

Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...

Rockwell Automation Stratix Industrial Managed Ethernet Switch 7Pk Errors (CVE-2018-0155)

A vulnerability in the Bidirectional Forwarding Detection BFD offload implementation could allow an unauthenticated remote attacker to cause a crash of the iosd process, causing a DoS condition. The vulnerability is due to insufficient error handling when the BFD header in a BFD packet is...

kernel: net/mlx5: E-Switch, Fix an Oops in error handling code

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code...

kernel: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q-elevator in blkmqelvswitchnone After grabbing q-sysfslock, q-elevator may become NULL because of elevator switch. Fix the NULL dereference on q-elevator by checking it with lock...

kernel: net/mlx5: E-Switch, Fix an Oops in error handling code

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code...

kernel: USB: gadget: Fix use-after-free during usb config switch

A use-after-free vulnerability was found in the Linux kernel's USB gadget subsystem. When switching USB configuration from RNDIS to another configuration, if the hardware's pullup callback fails either unsupported or hardware fault, the error handling path triggers rndisclose on already-freed...

CVE-2023-35140

The CVE-2023-35140 issue impacts Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5). The root cause is improper privilege management, enabling an authenticated local user with read-only access to modify system settings on the vulnerable device. Reported CVSS v3.1 vector: Local, Low attack co...