CVE-2015-1800
published 2017-08-24CVE-2015-1800: The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information.
PriorityP337high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
2.80%
84.9th percentile
The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | galaxy_s4_firmware | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c2f4-wqxr-6982: The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3
ghsa_unreviewed·2022-05-17
CVE-2015-1800 [HIGH] CWE-200 GHSA-c2f4-wqxr-6982: The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3
The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information.
Cisco
Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability
vendor_cisco·2016-01-14·CVSS 7.5
CVE-2015-6336 [HIGH] CWE-255 Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability
Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability
A vulnerability in Cisco Aironet 1800 Series Access Point devices could allow an unauthenticated, remote attacker to log in to the device by using a default account that has a static password. By default, the account does not have full administrative privileges.
The vulnerability is due to the presence of a default user account that is created when the device is installed. An attacker could exploit this vulnerability by logging in to the device by using the default account, which could allow the attacker to gain unauthorized access to the device.
Cisco released software updates that address this vulnerability. There are no workarounds that mitigate this vulnerability.
This advisory is available at t
Cisco
Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
vendor_cisco·2016-01-13·CVSS 7.8
CVE-2015-6320 [HIGH] CWE-399 Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
A vulnerability in the IP ingress packet handler of Cisco Aironet 1800 Series Access Point devices could allow an unauthenticated, remote attacker to cause a complete denial of service (DoS) condition.
The vulnerability is due to improper input validation of IP packet headers. An attacker could exploit this vulnerability by sending a crafted IP packet to an affected device. An successful exploit could allow the attacker to cause the device to reload unexpectedly.
Cisco has released software updates that address this vulnerability. There are no workarounds that mitigate this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/
Cisco
Cisco Aironet 1800 Series Access Point SSHv2 Denial of Service Vulnerability
vendor_cisco·2015-11-13·CVSS 5.0
CVE-2015-6367 [MEDIUM] CWE-399 Cisco Aironet 1800 Series Access Point SSHv2 Denial of Service Vulnerability
Cisco Aironet 1800 Series Access Point SSHv2 Denial of Service Vulnerability
A vulnerability in the Secure Shell Version 2 (SSHv2) protocol of Cisco Aironet 1800 Series Access Points could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization and an accumulation of SSHv2 connections.
The vulnerability is due to improper handling of incoming SSHv2 connections that do not complete properly. An attacker could exploit this vulnerability by sending a high number of crafted SSHv2 connections to an affected device. An exploit could allow the attacker to cause a DoS condition due to high CPU utilization and an accumulation of SSHv2 connections.
Cisco has not released software updates that address this vulnerability. Workarounds that m
Cisco
Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
vendor_cisco
CVE-2015-6320 Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
CVE-2015-6320: Cisco Aironet 1800 Series Access Point Denial of Service Vulnerability
A vulnerability in the IP ingress packet handler of Cisco Aironet 1800 Series Access Point devices could allow an unauthenticated, remote attacker to cause a complete denial of service (DoS) condition. The vulnerability is due to improper input validation of IP packet headers. An attacker could exploit this vulnerability by sending a crafted IP packet to an affected device. An successful exploit could allow the attacker to cause the device to reload unexpectedly. Cisco has released software updates that address this vulnerability. There are no
CWE: CWE-399, CWE-399
Bug IDs: CSCuv63138
Cisco
Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability
vendor_cisco
CVE-2015-6336 Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability
CVE-2015-6336: Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability
A vulnerability in Cisco Aironet 1800 Series Access Point devices could allow an unauthenticated, remote attacker to log in to the device by using a default account that has a static password. By default, the account does not have full administrative privileges. The vulnerability is due to the presence of a default user account that is created when the device is installed. An attacker could exploit this vulnerability by logging in to the device by using the default account, which could allow the attacker to gain unauthorized access to the device. Cisco released software updates that address this vulnerability. There are no
CWE: CWE-255, CWE-255
Bug IDs: CSCuw58062
Cisco
Cisco Aironet 1800 Series Access Point SSHv2 Denial of Service Vulnerability
vendor_cisco
CVE-2015-6367 Cisco Aironet 1800 Series Access Point SSHv2 Denial of Service Vulnerability
CVE-2015-6367: Cisco Aironet 1800 Series Access Point SSHv2 Denial of Service Vulnerability
A vulnerability in the Secure Shell Version 2 (SSHv2) protocol of Cisco Aironet 1800 Series Access Points could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization and an accumulation of SSHv2 connections. The vulnerability is due to improper handling of incoming SSHv2 connections that do not complete properly. An attacker could exploit this vulnerability by sending a high number of crafted SSHv2 connections to an affected device. An exploit could allow the attacker to cause a DoS condition due to high CPU utilization and an accumulation of SSHv2 connections. Cisco has not released software updates that address this vulnerability.
CWE: C
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2015/09/21/13http://www.openwall.com/lists/oss-security/2015/09/21/4http://www.openwall.com/lists/oss-security/2015/09/22/18http://www.securityfocus.com/bid/76807http://www.openwall.com/lists/oss-security/2015/09/21/13http://www.openwall.com/lists/oss-security/2015/09/21/4http://www.openwall.com/lists/oss-security/2015/09/22/18http://www.securityfocus.com/bid/76807
2017-08-24
Published