Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-8350 | An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 t… | High (8.8) | 2020-10-14 | Environment Specific |
| CVE-2020-3483 | Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL ce… | High (7.1) | 2020-10-14 | Environment Specific |
| CVE-2020-15253 | Versions of Grocy <= 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered… | High (7.3) | 2020-10-14 | Environment Specific |
| CVE-2020-0423 | In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to loca… | High (7.8) | 2020-10-14 | Environment Specific |
| CVE-2020-0422 | In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass … | Low (3.3) | 2020-10-14 | Environment Specific |