CVE-2022-39186

CVE-2022-39186 affects EXFO BV-10 Performance Endpoint Unit. The root cause is a misconfigured permissions setting on the system configuration file, as reported by multiple sources (NVD, CNNVD). Potential impact includes high confidentiality exposure, with local attack vector and low attack compl...

CVE-2022-39184: Improper Authentication

EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass...

CVE-2022-39185: Use of Hard-coded Credentials

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user...

CVE-2022-39186: Incorrect Permission Assignment for Critical Resource

EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions...

PT-2023-13709 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO - BV-10 Performance Endpoint Unit affected versions not specified Description: The issue concerns a misconfiguration in the EXFO - BV-10 Performance Endpoint Unit, specifically with the system configuration file having misconfigured...

PT-2023-13707 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO BV-10 Performance Endpoint Unit affected versions not specified Description: The issue allows a user to manually manipulate access, enabling an authentication bypass. This means that an individual can potentially gain unauthorized access...

PT-2023-13708 · Exfo · Exfo Bv-10 Performance Endpoint Unit

Name of the Vulnerable Software and Affected Versions: EXFO BV-10 Performance Endpoint Unit affected versions not specified Description: The issue concerns an undocumented hard-coded privileged user in the EXFO BV-10 Performance Endpoint Unit. This means that there is a user account with elevated...

systemd:fuzz-unit-file: Heap-double-free in open_file_parse

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6406146447769600 Project: systemd Fuzzing Engine: honggfuzz Fuzz Target: fuzz-unit-file Job Type: honggfuzzasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x606000000560...

CVE-2023-20531

Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service...

CVE-2023-20529

Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service...

CVE-2023-20530

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service...

CVE-2023-20528

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality...

CVE-2021-26355

Insufficient fencing and checks in System Management Unit SMU may result in access to invalid message port registers that could result in a potential denial-of-service...

Authorization

Insufficient fencing and checks in System Management Unit SMU may result in access to invalid message port registers that could result in a potential denial-of-service...

AMD Secure Processor security vulnerabilities

AMD Secure Encrypted Virtualization is a product of AMD Semiconductor, Inc. AMD Secure Encrypted Virtualization is a software application.AMD System Management Unit SMU is a system management unit. AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip. A security vulnerability exists in AM...

AMD Secure Processor security vulnerabilities

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP, AMD System Management Unit SMU, and AMD Secure Encrypted Virtualization SEV, which stems from insufficient authentication of commands, which...

AMD System Management Unit (SMU) resource management error vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient guarding and checking, resulting in access to invalid message port registers, which could lead to a denial of...

AMD Secure Processor Security Feature Vulnerability

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP, AMD System Management Unit SMU, and AMD Secure Encrypted Virtualization SEV. An attacker could exploit this vulnerability to cause an informati...

Multiple AMD products have security vulnerabilities

The AMD System Management Unit SMU and AMD Secure Processor ASP are both products of UltraMicroelectronics AMD, Inc.The AMD System Management Unit is a system management unit.The AMD Secure Processor is a standalone AMD Secure Processor is a standalone ARM Coretex-A5 chip. A security vulnerabilit...

AMD System Management Unit (SMU) buffer error vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in the AMD System Management Unit SMU that stems from insufficient bind checking and could allow an attacker to update the sender/receiver address space to an invalid value...