CWE-693 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-693/ Sun, 26 Feb 2023 06:51:47 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-693 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-693/ 32 32 CVE-2018-9322 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9322/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9322/ The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interface. An attacker can bypass the code-signing protection mechanism for firmware updates, and consequently obtain a root […]

The post CVE-2018-9322 appeared first on CVE Vulnerability.

]]> The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the USB or OBD-II interface. An attacker can bypass the code-signing protection mechanism for firmware updates, and consequently obtain a root shell.

The post CVE-2018-9322 appeared first on CVE Vulnerability.

]]> CVE-2018-9320 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9320/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9320/ The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in.

The post CVE-2018-9320 appeared first on CVE Vulnerability.

]]> The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in.

The post CVE-2018-9320 appeared first on CVE Vulnerability.

]]> CVE-2018-9318 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9318/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9318/ The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.

The post CVE-2018-9318 appeared first on CVE Vulnerability.

]]> The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.

The post CVE-2018-9318 appeared first on CVE Vulnerability.

]]> CVE-2018-9314 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9314/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9314/ The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access.

The post CVE-2018-9314 appeared first on CVE Vulnerability.

]]> The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows an attack by an attacker who has direct physical access.

The post CVE-2018-9314 appeared first on CVE Vulnerability.

]]> CVE-2018-9313 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9313/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9313/ The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote attack via Bluetooth when in pairing mode, leading to a Head Unit reboot.

The post CVE-2018-9313 appeared first on CVE Vulnerability.

]]> The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a remote attack via Bluetooth when in pairing mode, leading to a Head Unit reboot.

The post CVE-2018-9313 appeared first on CVE Vulnerability.

]]> CVE-2018-9312 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9312/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9312/ The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in.

The post CVE-2018-9312 appeared first on CVE Vulnerability.

]]> The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB device is plugged in.

The post CVE-2018-9312 appeared first on CVE Vulnerability.

]]> CVE-2018-9311 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9311/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9311/ The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.

The post CVE-2018-9311 appeared first on CVE Vulnerability.

]]> The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.

The post CVE-2018-9311 appeared first on CVE Vulnerability.

]]> CVE-2018-6794 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6794/ Sun, 26 Feb 2023 06:50:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6794/ Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-way handshake is complete, then the data sent by the malicious server will be accepted by web clients such as a web browser or Linux CLI […]

The post CVE-2018-6794 appeared first on CVE Vulnerability.

]]> Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-way handshake is complete, then the data sent by the malicious server will be accepted by web clients such as a web browser or Linux CLI utilities, but ignored by Suricata IDS signatures. This mostly affects IDS signatures for the HTTP protocol and TCP stream content; signatures for TCP packets will inspect such network traffic as usual.

The post CVE-2018-6794 appeared first on CVE Vulnerability.

]]> CVE-2018-10631 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10631/ Sun, 26 Feb 2023 06:44:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10631/ Medtronic N’Vision Clinician Programmer 8840 N’Vision Clinician Programmer, all versions, and 8870 N’Vision removable Application Card, all versions. The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary […]

The post CVE-2018-10631 appeared first on CVE Vulnerability.

]]> Medtronic N’Vision Clinician Programmer 8840 N’Vision Clinician Programmer, all versions, and 8870 N’Vision removable Application Card, all versions. The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

The post CVE-2018-10631 appeared first on CVE Vulnerability.

]]> CVE-2018-0384 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-0384/ Sun, 26 Feb 2023 06:44:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-0384/ A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control policy that is configured to block traffic for an affected system. The vulnerability exists because the affected software incorrectly handles TCP packets that are received out of order when a TCP SYN […]

The post CVE-2018-0384 appeared first on CVE Vulnerability.

]]> A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control policy that is configured to block traffic for an affected system. The vulnerability exists because the affected software incorrectly handles TCP packets that are received out of order when a TCP SYN retransmission is issued. An attacker could exploit this vulnerability by sending a maliciously crafted connection through an affected device. A successful exploit could allow the attacker to bypass a URL-based access control policy that is configured to block traffic for the affected system. Cisco Bug IDs: CSCvh84511.

The post CVE-2018-0384 appeared first on CVE Vulnerability.

]]>