Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2022-32030 | Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetQosBand. | High (7.5) | 2022-07-01 | Environment Specific |
| CVE-2022-33103 | Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir… | High (7.8) | 2022-07-01 | Environment Specific |
| CVE-2022-32988 | Cross Site Scripting (XSS) vulnerability in router Asus DSL-N14U-B1 1.1.2.3_805 via the "*list" parameters (e.g. filter… | Medium (5.4) | 2022-07-01 | Environment Specific |
| CVE-2022-32295 | On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure acces… | Critical (9.8) | 2022-07-01 | Environment Specific |
| CVE-2021-32428 | SQL Injection vulnerability in viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Book… | Critical (9.8) | 2022-07-01 | Environment Specific |