Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2022-21744 | In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code e… | Critical (9.8) | 2022-07-06 | Environment Specific |
| CVE-2022-20083 | In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote cod… | Critical (9.8) | 2022-07-06 | Environment Specific |
| CVE-2022-28935 | Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, … | High (7.2) | 2022-07-06 | Environment Specific |
| CVE-2022-24141 | The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attack… | Medium (5.4) | 2022-07-06 | Environment Specific |
| CVE-2021-31678 | An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user… | Medium (6.5) | 2022-07-06 | Environment Specific |