🔌

IoT / Embedded

slug: iot-embedded

🛡 Vulnérabilités associées 23

ID	Titre	Gravité	Détecté
CVE-2026-44107	A reboot of the charging controller can be triggered via Modbus TCP without authentication....	High	il y a 2 mois
CVE-2026-13519	A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function...	High	il y a 3 mois
CVE-2026-13517	A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function...	High	il y a 3 mois
CVE-2025-67038 KEV	[KEV] Injection de commande OS dans Lantronix EDS5000 (CVE-2025-67038)	Critical	il y a 3 mois
CVE-2026-12187	Vulnérabilité dans CVE-2026-12187 (CVE-2026-12187)	High	il y a 4 mois
CVE-2026-45542	ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a heap buffer overflow exists in the Security Scheme 2 (SRP6a) session-setup p...	High	il y a 4 mois
CVE-2026-45329	ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, several ESP-TEE secure-service wrappers in esp_secure_services.c and esp_secure_services_iram.c vali...	High	il y a 4 mois
CVE-2026-45541	ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference exists in the WebSocket subprotocol-negotiation pat...	High	il y a 4 mois
CVE-2019-25719	Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors running software...	High	il y a 4 mois
CVE-2026-10192	A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function...	High	il y a 4 mois
CVE-2026-42929	Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.	High	il y a 4 mois
CVE-2026-25781	in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.	High	il y a 4 mois
CVE-2026-24792	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	il y a 4 mois
CVE-2026-8153	Injection de commande OS dans iot-embedded (CVE-2026-8153)	Critical	il y a 5 mois
CVE-2023-46453	Injection SQL dans network-device (CVE-2023-46453)	Critical	il y a 5 mois
CVE-2026-30496	Vulnérabilité dans android (CVE-2026-30496)	Critical	il y a 5 mois
CVE-2026-42087	Injection SQL dans sqli (CVE-2026-42087)	Critical	il y a 5 mois
CVE-2026-24781	Injection de code dans vm2-project (CVE-2026-24781)	Critical	il y a 5 mois
CVE-2026-24120	Injection de code dans vm2-project (CVE-2026-24120)	Critical	il y a 5 mois
CVE-2026-5550	A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The...	High	il y a 6 mois
CVE-2025-10456	Vulnérabilité dans Bluetooth Low Energy (BLE) fixed channels (CVE-2025-10456)	High	il y a 1 an
CVE-2017-14853	The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attac...	High	il y a 7 ans
CVE-2015-2280	snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands vi...	High	il y a 9 ans