CVE-2024-25088

CVE-2024-25088 affects Jungo WinDriver prior to 12.5.1. The issue is improper privilege management that enables a local attacker to escalate privileges and execute arbitrary code. Public sources consistently identify local privilege escalation as the impact; no remote exploitation is indicated. M...

CVE-2024-22103

CVE-2024-22103 affects Jungo WinDriver up to version 12.5.x (fixed in 12.6.0). The vulnerability is an out-of-bounds write in the WinDriver toolkit, enabling a local attacker to trigger a Windows blue screen and a Denial of Service. The issue is local, requires physical or remote access with user...

CVE-2024-22106

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service DoS...

CVE-2024-22104

CVE-2024-22104 is a local, out-of-bounds write vulnerability in Jungo WinDriver prior to version 12.5.1. The issue allows a local attacker to trigger a Windows blue screen and a Denial of Service (DoS). The vulnerability is caused by an out-of-bounds write in affected WinDriver components, enabli...

CVE-2023-51777

Denial of Service DoS vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error...

CVE-2023-51778

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service DoS...

Jungo WinDriver 安全漏洞

Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. A privilege management error vulnerability exist...

Jungo WinDriver 安全漏洞

Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. A privilege management error vulnerability exist...

CVE-2024-22105

Denial of Service DoS vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error...

Jungo WinDriver 安全漏洞

Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. An out-of-bounds write vulnerability exists in...

Jungo WinDriver 安全漏洞

Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. A denial-of-service vulnerability exists in...

CVE-2024-25088

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code...

CVE-2024-22105

Denial of Service DoS vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error...

CVE-2024-22103

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service DoS...

Hirschmann HiOS Switches Argument Injection or Modification (CVE-2019-12258)

An attacker with the source and destination TCP-port and IP-addresses of a session can inject invalid TCP-segments into the flow, causing the TCP-session to be reset. An application will see this as an ECONNRESET error message when using the socket after such an attack. The most likely outcome is...

Schneider Electric Quantum Ethernet Module Hard-Coded Credentials (CVE-2011-4859)

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771 and 140CPU65 modules, the Premium TSXETY and TSXP57 modules, the M340 BMXNOE01 and BMXP3420 modules, and the STB DIO STBNIC2212 and STBNIP2 modules, uses hardcoded passwords for the 1 AUTCSE, 2 AUTCSE, 3 fdrusers, 4...

Hitachi Energy Relion 670 650 series and SAM600-IO Product

SUMMARY Hitachi Energy is aware of two critical memory allocation vulnerabilities called BadAlloc 1 vulnerabilities in the WindRiver VxWorks Operating Systems 23 that are used in our product versions listed in this advisory. An attacker that exploits these vulnerabilities might bypass security...

Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition. File data ot500063.nasl...

Windriver Vxworks NULL Pointer Dereference

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing. File data ot500058.nasl...

Schneider-electric Quantum Unspecified Vulnerability

The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771 and 140CPU65 modules, the Premium TSXETY and TSXP57 modules, the M340 BMXNOE01 and BMXP3420 modules, and the STB DIO STBNIC2212 and STBNIP2 modules, uses hardcoded passwords for the 1 AUTCSE, 2 AUTCSE, 3 fdrusers, 4...