Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2014-2651 | Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the W… | Critical (9.8) | 2020-01-09 | Environment Specific |
| CVE-2014-2650 | Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web ba… | Critical (9.8) | 2020-01-09 | Environment Specific |
| CVE-2020-6629 | Ming (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in decompile.c. | Medium (6.5) | 2020-01-09 | Environment Specific |
| CVE-2020-6624 | jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. | High (7.1) | 2020-01-09 | Environment Specific |
| CVE-2020-6623 | stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index. | High (8.8) | 2020-01-08 | Environment Specific |