Lucene search
K

434 matches found

OSV
OSV
added 2024/01/03 8:15 a.m.1 views

DEBIAN-CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.4AI score0.00074EPSS
Exploits1References1
NVD
NVD
added 2024/01/03 8:15 a.m.19 views

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.6AI score0.00074EPSS
Exploits1References2
Prion
Prion
added 2024/01/03 8:15 a.m.13 views

Design/Logic Flaw

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

5CVSS7.3AI score0.00074EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2024/01/03 8:15 a.m.1 views

UBUNTU-CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS5.8AI score0.00074EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2024/01/03 7:31 a.m.28 views

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.7AI score0.00074EPSS
Exploits1
Cvelist
Cvelist
added 2024/01/03 7:31 a.m.17 views

CVE-2024-0210 Uncontrolled Recursion in Wireshark

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.8AI score0.00074EPSS
Exploits1References2
OSV
OSV
added 2024/01/03 7:31 a.m.17 views

CVE-2024-0210 Uncontrolled Recursion in Wireshark

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.3AI score0.00074EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/01/03 7:31 a.m.2 views

CVE-2024-0210 Uncontrolled Recursion in Wireshark

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.8AI score0.00074EPSS
Exploits1References2
CVE
CVE
added 2024/01/03 7:31 a.m.68 views

CVE-2024-0210

CVE-2024-0210 affects Wireshark 4.2.0 where the Zigbee TLV dissector crashes, enabling a denial-of-service via crafted captures or packet injection. Public advisories indicate the issue is fixed in Wireshark 4.2.6 (SUSE/SUSE-SU-2024:3165-1 context). Affected component: Zigbee TLV dissector; root ...

7.8CVSS7.5AI score0.00074EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/03 12:0 a.m.2 views

PT-2024-15387 · Wireshark +1 · Wireshark +1

Name of the Vulnerable Software and Affected Versions: Wireshark version 4.2.0 Description: The issue allows for denial of service via packet injection or crafted capture file, specifically affecting the Zigbee TLV dissector in Wireshark. Recommendations: For Wireshark version 4.2.0, update to a...

7.8CVSS7.8AI score0.02494EPSS
Exploits9References77
CNNVD
CNNVD
added 2024/01/03 12:0 a.m.1 views

Wireshark 安全漏洞

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from a Zigbee TLV parser crash that...

7.8CVSS7.1AI score0.00074EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2024/01/03 12:0 a.m.23 views

CVE-2024-0210

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.8AI score0.00074EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:0 a.m.36 views

Wireshark 4.2.x < 4.2.1 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.2.1 advisory. - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packe...

7.8CVSS6.9AI score0.00082EPSS
Exploits5References16
ICS
ICS
added 2023/10/26 6:0 a.m.20 views

Centralite Pearl Thermostat

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Centralite Equipment : Pearl Thermostat Vulnerability : Allocation of Resources Without Limits or Throttling 2. RISK EVALUATION Successful exploitation of this...

7.5CVSS7.7AI score0.00111EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.1 views

PT-2023-27780 · Ember · Ember Znet

Name of the Vulnerable Software and Affected Versions: Ember ZNet versions 7.1.3 through 7.1.5 Ember ZNet versions 7.2.0 through 7.2.3 Description: The issue is related to TouchLink packets being processed after a timeout or out of range due to Operation on a Resource after Expiration and Missing...

10CVSS7.1AI score0.00081EPSS
Exploits0References5
NVD
NVD
added 2023/04/25 2:15 p.m.9 views

CVE-2023-29779

Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...

7.5CVSS7.4AI score0.00602EPSS
Exploits1References2
OSV
OSV
added 2023/04/25 2:15 p.m.2 views

CVE-2023-29779

Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...

7.5CVSS7.2AI score
Exploits0References2
Prion
Prion
added 2023/04/25 2:15 p.m.15 views

Command injection

Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...

5CVSS7.4AI score0.00602EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/25 12:0 a.m.3 views

CVE-2023-29779

Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...

6.9AI score0.00602EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/04/25 12:0 a.m.2 views

PT-2023-22415 · Sengled · Sengled Dimmer Switch

Name of the Vulnerable Software and Affected Versions: Sengled Dimmer Switch version 0.0.9 Description: The issue allows a remote attacker to send malicious Zigbee messages to a vulnerable device, causing it to crash. After receiving the malicious command, the device will continuously report its...

7.5CVSS7.5AI score0.00602EPSS
Exploits1References4
Rows per page
Query Builder