Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2019-14559 | Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service v… | High (7.5) | 2020-11-23 | Environment Specific |
| CVE-2020-25189 | The affected product is vulnerable to three stack-based buffer overflows, which may allow an unauthenticated attacker t… | Critical (9.8) | 2020-11-21 | Environment Specific |
| CVE-2020-5797 | UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, wit… | Medium (6.1) | 2020-11-21 | Environment Specific |
| CVE-2020-25185 | The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to re… | High (8.8) | 2020-11-21 | Environment Specific |
| CVE-2020-20740 | PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version(). | High (7.8) | 2020-11-20 | Environment Specific |