223 matches found
PT-2024-21268 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the tmu tz control function of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of...
CVE-2024-23057
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function...
Command injection
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function...
TOTOLINK A3300R 安全漏洞
TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the tz parameter of the setNtpCfg method failing to correctly filter construct command special characters,...
PT-2024-1091 · D Link · D-Link Dcs-8300Lhv2
Name of the Vulnerable Software and Affected Versions: D-Link DCS-8300LHV2 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required to exploi...
PT-2024-19648 · Totolink · Totolink A3300R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version V17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the tz parameter in the setNtpCfg function, allowing for potential exploitation. Recommendations: For TOTOLINK A3300R version...
CVE-2023-33032
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region...
Memory corruption
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region...
CVE-2023-33032
CVE-2023-33032 corresponds to memory corruption in TZ Secure OS when requesting a memory allocation from the TA region. The description is consistently reported across multiple sources (NVD, Red Hat, CVE listing, PRION, CNNVD) as a TZ Secure OS memory corruption issue. The initial entries do not ...
CVE-2023-33032 Integer Overflow or Wraparound in TZ Secure OS
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region...
CVE-2023-33032 Integer Overflow or Wraparound in TZ Secure OS
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region...
PT-2024-12377 · Unknown · Tz Secure Os
Name of the Vulnerable Software and Affected Versions: TZ Secure OS affected versions not specified Description: The issue is related to memory corruption in TZ Secure OS when requesting a memory allocation from the TA region. Recommendations: At the moment, there is no information about a newer...
CVE-2023-51024
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi...
CVE-2023-51024
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi...
TOTOLINK EX1800T 安全漏洞
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setNtpCfg interface. The vulnerability stems from the failure of the tz parameter of the setNtpCfg interface of cstecgi .cgi to properly filter...
PT-2023-31739 · Totolink · Totolink Ex1800T
Name of the Vulnerable Software and Affected Versions: TOTOlink EX1800T version 9.1.0cu.2112 B20220316 Description: The issue allows for unauthorized arbitrary command execution in the tz parameter of the setNtpCfg interface of the cstecgi .cgi. This can be exploited through the 'tz' parameter...
CVE-2023-28586 Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...
CVE-2023-28586 Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS
Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...