365 matches found
CVE-2022-46378
An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs wh...
CVE-2022-46377
Weston Embedded uC-FTPs 1.98.00 has an out-of-bounds read in the PORT command argument extraction. When no IP address argument is provided to PORT, the server may misparse the buffer, potentially leading to denial of service. Concrete details in Talos/TALOS-2022-1681 describe the vulnerable code ...
PT-2023-14922 · Unknown · Weston Embedded Uc-Ftps
Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-FTPs version 1.98.00 Description: An out-of-bounds read issue exists in the PORT command parameter extraction functionality. A specially-crafted set of network packets can lead to denial of service. This occurs when no IP...
Weston Embedded uC-FTPs PORT command parameter extraction out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2022-1681 Weston Embedded uC-FTPs PORT command parameter extraction out-of-bounds read vulnerability May 10, 2023 CVE Number CVE-2022-46377,CVE-2022-46378 SUMMARY An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of...
PT-2023-14923 · Unknown · Weston Embedded Uc-Ftps
Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-FTPs version 1.98.00 Description: An out-of-bounds read issue exists in the PORT command parameter extraction functionality. This can be triggered by a specially-crafted set of network packets, leading to denial of service...
Weston Embedded uC-FTPs 授权问题漏洞
Weston Embedded uC-FTPs is a Micrium FTP File Transfer Protocol server from Weston Embedded. A security vulnerability exists in Weston Embedded uC-FTPs v 1.98.00, which stems from an authentication bypass vulnerability in the authentication feature that could allow an attacker to send a series of...
Weston Embedded uC-FTPs Authentication authentication bypass vulnerability
Talos Vulnerability Report TALOS-2022-1680 Weston Embedded uC-FTPs Authentication authentication bypass vulnerability May 10, 2023 CVE Number CVE-2022-41985 SUMMARY An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00. A specially...
ptr.ucmerced.edu Cross Site Scripting vulnerability OBB-3220802
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ballast-outreach-ucsgep.ucdavis.edu Cross Site Scripting vulnerability OBB-3220160
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-1257
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication...
CVE-2023-1257
CVE-2023-1257 affects Moxa UC Series devices. The vulnerability arises from improper physical access control, enabling an attacker with physical access to restart the device, access BIOS, alter bootloader/command-line options, and reach the terminal to modify authentication files and create a new...
CVE-2023-1257 CVE-2023-1257
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication...
Moxa UC 安全漏洞
The MOXA UC Series is a series of computers from the Chinese company Moxa MOXA. The Moxa UC suffers from a security vulnerability that originates from the fact that an attacker with physical access can boot the device to reboot and gain access to its BIOS, which can then be used to change command...
PT-2023-1864 · Moxa · Moxa Uc Series
Name of the Vulnerable Software and Affected Versions: Moxa UC Series devices affected versions not specified Description: The issue allows an attacker with physical access to the device to initiate a restart, gain access to the BIOS, and alter command line options to access the terminal. From th...
SUSE CVE-2013-2212
The vmxsetucmode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service CPU consumption and possibly hypervisor or guest kernel panic via a crafted GFN range...
CISA Releases Seven Industrial Control Systems Advisories
CISA released seven 7 Industrial Control Systems ICS advisories on November 29, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...
Moxa UC Series
1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Low attack complexity Vendor: Moxa Equipment: UC Series Vulnerability: Improper Physical Access Control 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-22-333-04 Moxa UC Series that was published November...
Code injection
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T...
PT-2022-5655 · Moxa · Moxa Aig-300 +10
Name of the Vulnerable Software and Affected Versions: Moxa UC-8100A-ME-T System Image versions v1.0 to v1.6 Moxa UC-2100 System Image versions v1.0 to v1.12 Moxa UC-2100-W System Image versions v1.0 to v1.12 Moxa UC-3100 System Image versions v1.0 to v1.6 Moxa UC-5100 System Image versions v1.0 ...