4411 matches found
Cisco IOS XR RCE (cisco-sa-iosxr-pxe-unsign-code-exec-qAa78fD2)
According to its self-reported version, IOS-XR is affected by a remote code execution vulnerability in the enhanced Preboot eXecution Environment PXE boot loader due to a failure to verify commands issued during a network boot. An unauthenticated, remote attacker can exploit this to execute...
Vulnerability fixed in Cisco IOS XR
A vulnerability in the Preboot eXecution Environment PXE bootloader for Cisco IOS XR 64-bit software could allow an unauthenticated, remote malicious agent to execute execute unsigned code during the PXE boot process on an affected device. The PXE bootloader is part of the BIOS and is executed...
Cisco IOS XR Software Enhanced Preboot eXecution Environment Unsigned Code Execution Vulnerability
A vulnerability in the enhanced Preboot eXecution Environment PXE boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the...
fwupd: Possible bypass in signature verification
A PGP signature bypass flaw was found in fwupd, which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service LVFS is either not implemented or enabled in versions of fwupd...
PT-2020-4611
Name of the Vulnerable Software and Affected Versions Cisco IOS XR 64-bit Software affected versions not specified Description A vulnerability in the enhanced Preboot eXecution Environment PXE boot loader could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot...
CVE-2020-28045
An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R. This OS requires installed applications and all system binaries to be signed either by the manufacturer or by the Point Of Sale application developer and distributor. The signature is a 2048-byte RSA signature verified in...
CVE-2020-28045
An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R. This OS requires installed applications and all system binaries to be signed either by the manufacturer or by the Point Of Sale application developer and distributor. The signature is a 2048-byte RSA signature verified in...
Code injection
An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R. This OS requires installed applications and all system binaries to be signed either by the manufacturer or by the Point Of Sale application developer and distributor. The signature is a 2048-byte RSA signature verified in...
CVE-2020-28045
CVE-2020-28045 affects ProlinOS up to 2.4.161.8859R. Root cause: shared libraries are not required to be signed and are not verified, allowing an attacker with local access to load a crafted shared object via LD_PRELOAD, bypassing kernel ELF verification and executing unsigned code. This creates ...
CVE-2020-28045
An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R. This OS requires installed applications and all system binaries to be signed either by the manufacturer or by the Point Of Sale application developer and distributor. The signature is a 2048-byte RSA signature verified in...
PT-2020-16908
Name of the Vulnerable Software and Affected Versions ProlinOS versions through 2.4.161.8859R Description A security issue was found in the way ProlinOS handles unsigned libraries. The operating system requires applications and system binaries to be signed, but shared libraries do not need to be...
CVE-2019-14713
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages...
CVE-2019-14713
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages...
Code injection
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages...
CVE-2019-14713
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages...
CVE-2019-14713
The CVE-2019-14713 entry concerns Verifone MX900 series Pinpad Payment Terminals running OS 30251000, where the system allows installation of unsigned packages. Connected sources corroborate the same description and note an integrity impact (HIGH) with local access required and no user interactio...
PT-2020-9586
Name of the Vulnerable Software and Affected Versions: Verifone MX900 series Pinpad Payment Terminals version 30251000 Description: The issue allows for the installation of unsigned packages on the Verifone MX900 series Pinpad Payment Terminals. Recommendations: For version 30251000, ensure that...
CVE-2019-14713: Undefined Security Weakness
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages...