CVE-2021-31337

The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled. Telnet is disabled by default on the SINAMICS Medium Voltage Products SINAMICS SL15...

CVE-2021-27388

SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control...

Design/Logic Flaw

SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control...

CVE-2021-27388

The CVE-2021-27388 entry affects Siemens SINAMICS medium voltage remote-access products (SINAMICS SL150, SM150, SM150i). A vulnerability in the Sm@rtServer component allows unauthenticated remote access that can cause a denial-of-service and may enable limited configuration modifications or execu...

CVE-2021-27388

SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control...

SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2019:14217-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14217-1 advisory. - TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable...

SUSE: Security Advisory (SUSE-SU-2019:2987-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GSD-2021-1000401 soc/tegra: regulators: Fix locking up when voltage-spread is out of range

soc/tegra: regulators: Fix locking up when voltage-spread is out of range This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000401 soc/tegra: regulators: Fix locking up when voltage-spread is out of range

soc/tegra: regulators: Fix locking up when voltage-spread is out of range This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000307 soc/tegra: regulators: Fix locking up when voltage-spread is out of range

soc/tegra: regulators: Fix locking up when voltage-spread is out of range This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

Siemens SINAMICS Medium Voltage Products Remote Access (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SINAMICS Medium Voltage Products, Remote Access Vulnerabilities: Improper Restriction of Operations Within the Bounds of a Memory Buffer, Access of Memory Location After End of Buffer, Uncontrolled Resourc...

PT-2021-8011 · Nvidia · Tegra30

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a bug in the code that causes a voltage coupler lockup when the voltage-spread is out of range. This problem is observed on Tegra30 Ouya game console once...

Schneider Electric EcoStruxure Power Build-Rapsody Code Issue Vulnerability

Schneider Electric EcoStruxure Power Build-Rapsody is a software for simplifying the configuration of low-voltage distribution panels from Schneider Electric France. A code issue vulnerability exists in EcoStruxure Power Build-Rapsody version V2.1.13 and prior versions, which arises from the...

Unspecified Vulnerability in Schneider Electric Easergy T300

Easergy T300 is a new generation intelligent terminal for distribution network automation, which is designed with the concept of "Modularity, Flexibility, and Application Oriented", and can be widely used in medium voltage distribution network management, fault location, isolation, and restoratio...

Unspecified Vulnerability in Schneider Electric Easergy T300 (CNVD-2021-19762)

Easergy T300 is a new generation of intelligent terminals for distribution network automation, adhering to the design concepts of "modularity, flexibility, and application orientation", which can be widely used in medium-voltage distribution network management, fault location, isolation, and...

Schneider Electric Easergy T300 安全漏洞

Easergy T300 is a new generation of intelligent terminals for distribution network automation, adhering to the design concepts of "modularity, flexibility, and application orientation", which can be widely used in medium-voltage distribution network management, fault location, isolation, and...

Denial Of Service (DoS)

intel-microcode is vulnerable to denial of service. A local attacker is able to crash the application due to insecure conditions check in the voltage modulation interface...

SpeedFan elevation of privilege vulnerability

SpeedFan is a system monitor for Microsoft Windows that reads the temperature, voltage, and fan speed of computer components. speedFan 4.52 is vulnerable to a local elevation of privilege vulnerability. An attacker could exploit this vulnerability to elevate privileges via a specially crafted...

Hacking together a USB-C charger for a cheap Chromebook

The era of USB-C has come. The other day I threw all other cables into a box, and bought a set of USB-C to USB-C, Lightning, and microUSB cables. USB-C chargers around the house, USB-C PD power bank, even a nice small USB-C dock that works with the Nintendo Switch if the charger can do the right...

hw: voltage modulation technical advisory

Improper conditions check in the voltage modulation interface for some IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access...