Sign-up

VARIoT IoT vulnerabilities database

Affected products: vendor, model and version
CWE format is 'CWE-number'. Threat type can be: remote or local
Look up free text in title and description

VAR-202110-1131 CVE-2021-1984 plural  Qualcomm  Classic buffer overflow vulnerability in the product CVSS V2: 7.2
CVSS V3: 7.8
Severity: HIGH
Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables. plural Qualcomm The product contains a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
VAR-202110-1128 CVE-2021-30257 plural  Qualcomm  Product out-of-bounds read vulnerability CVSS V2: 7.2
CVSS V3: 7.8
Severity: HIGH
Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT. plural Qualcomm The product contains out-of-bounds read and out-of-bounds write vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
VAR-202110-1133 CVE-2021-1980 plural  Qualcomm  Product out-of-bounds read vulnerability CVSS V2: 6.4
CVSS V3: 9.1
Severity: CRITICAL
Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking. plural Qualcomm The product contains an out-of-bounds read vulnerability.Information is obtained and service operation is interrupted (DoS) It may be in a state
VAR-202110-1127 CVE-2021-30258 plural  Qualcomm  Out-of-bounds write vulnerabilities in the product CVSS V2: 7.2
CVSS V3: 7.8
Severity: HIGH
Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables. plural Qualcomm The product contains a vulnerability related to out-of-bounds writes.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
VAR-202110-1125 CVE-2021-30291 plural  Qualcomm  Out-of-bounds write vulnerabilities in the product CVSS V2: 7.2
CVSS V3: 7.8
Severity: HIGH
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables. plural Qualcomm The product contains a vulnerability related to out-of-bounds writes.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
VAR-202110-1123 CVE-2021-30297 plural  Qualcomm  Classic buffer overflow vulnerability in the product CVSS V2: 3.6
CVSS V3: 7.1
Severity: HIGH
Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables. plural Qualcomm The product contains a classic buffer overflow vulnerability.Information is obtained and service operation is interrupted (DoS) It may be in a state
VAR-202110-1126 CVE-2021-30288 plural  Qualcomm  Out-of-bounds write vulnerabilities in the product CVSS V2: 7.2
CVSS V3: 7.8
Severity: HIGH
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking. plural Qualcomm The product contains a vulnerability related to out-of-bounds writes.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
VAR-202110-1119 CVE-2021-30306 plural  Qualcomm  Product out-of-bounds read vulnerability CVSS V2: 3.6
CVSS V3: 7.1
Severity: HIGH
Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile. plural Qualcomm The product contains an out-of-bounds read vulnerability.Information is obtained and service operation is interrupted (DoS) It may be in a state
VAR-202110-1118 CVE-2021-30310 plural  Qualcomm  Product input verification vulnerabilities CVSS V2: 5.0
CVSS V3: 7.5
Severity: MEDIUM
Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music. plural Qualcomm The product contains an input validation vulnerability.Service operation interruption (DoS) It may be in a state
VAR-202110-1117 CVE-2021-30312 plural  Qualcomm  Product certification vulnerabilities CVSS V2: 5.0
CVSS V3: 7.5
Severity: MEDIUM
Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking. plural Qualcomm The product contains authentication vulnerabilities.Information may be obtained
VAR-202110-1034 CVE-2020-11303 plural  Qualcomm  Vulnerability related to resource disclosure to the wrong area in the product CVSS V2: 5.0
CVSS V3: 8.6
Severity: MEDIUM
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking. plural Qualcomm The product contains a resource disclosure vulnerability to the wrong area.Information may be obtained
VAR-202110-1032 CVE-2021-1949 plural  Qualcomm  Integer overflow vulnerability in product CVSS V2: 7.2
CVSS V3: 8.4
Severity: HIGH
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables. plural Qualcomm The product contains an integer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
VAR-202110-1208 CVE-2021-1936 plural  Qualcomm  In the product  NULL  Pointer dereference vulnerability CVSS V2: 7.8
CVSS V3: 7.5
Severity: HIGH
Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables. plural Qualcomm The product has NULL There is a vulnerability in pointer dereference.Service operation interruption (DoS) It may be in a state
VAR-202110-1124 CVE-2021-30292 plural  Qualcomm  Out-of-bounds write vulnerabilities in the product CVSS V2: 7.2
CVSS V3: 7.8
Severity: HIGH
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables. plural Qualcomm The product contains a vulnerability related to out-of-bounds writes.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
VAR-202110-1116 CVE-2021-30315 Snapdragon Auto  Vulnerability in using free memory in CVSS V2: 7.2
CVSS V3: 7.8
Severity: HIGH
Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto. Snapdragon Auto Exists in a vulnerability related to the use of freed memory.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
VAR-202110-2150 No CVE There is a command execution vulnerability in the Reporter system of Fujian Strait Information Technology Co., Ltd. CVSS V2: 10.0
CVSS V3: -
Severity: HIGH
Fujian Strait Information Technology Co., Ltd. is a state-owned holding high-tech enterprise, engaged in technical research, product sales, information security services and other businesses in the field of network security technology. There is a command execution vulnerability in the Reporter system of Fujian Strait Information Technology Co., Ltd. An attacker can use this vulnerability to execute arbitrary system commands and obtain server privileges.
VAR-202110-1911 No CVE Huawei Technologies Co., Ltd. SRG3230 has a weak password vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Huawei Technologies Co., Ltd. is an ICT (Information and Communication) infrastructure and smart terminal provider. Huawei Technologies Co., Ltd. SRG3230 has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202110-1910 No CVE Huawei Technologies Co., Ltd. SRG3250 has weak password vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Huawei Technologies Co., Ltd. is the world's leading provider of information and communication technology (ICT) solutions. Huawei Technologies Co., Ltd. SRG3250 has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202110-1909 No CVE Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR_RGOS 11.9 has a file inclusion vulnerability CVSS V2: 5.0
CVSS V3: -
Severity: MEDIUM
Beijing Xingwang Ruijie Network Technology Co., Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other projects. Beijing Xingwang Ruijie Network Technology Co., Ltd. NBR_RGOS 11.9 has a file inclusion vulnerability, which can be exploited by attackers to obtain sensitive information.
VAR-202110-0677 CVE-2021-36309 Dell's  Enterprise SONiC OS  Vulnerability regarding insufficient protection of authentication information in CVSS V2: 4.0
CVSS V3: 6.5
Severity: MEDIUM
Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks