Month: November 2023

Intel NUC Software privilege escalation | CVE-2023-32660

November 16, 2023

NAME__________Intel NUC Software privilege escalationPlatforms Affected:Intel NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation softwareRisk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Intel NUC...

GIMP code execution | CVE-2023-44444

November 16, 2023

NAME__________GIMP code executionPlatforms Affected:GIMP GIMPRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________GIMP could allow a remote attacker to execute arbitrary code on the system,...

Fortinet FortiOS and Fortinet FortiProxy denial of service | CVE-2023-36641

November 16, 2023

NAME__________Fortinet FortiOS and Fortinet FortiProxy denial of servicePlatforms Affected:Fortinet FortiOS 6.2.1 Fortinet FortiOS 6.2.0 Fortinet FortiOS 6.2.2 Fortinet FortiOS 6.2.3...

Intel Optane SSD products denial of service | CVE-2023-27306

November 16, 2023

NAME__________Intel Optane SSD products denial of servicePlatforms Affected:Intel Optane Intel Optane SSD DC P4800X Intel Optane SSD DC P4801X Series...

TPLink TL-WR902AC information disclosure | CVE-2023-44447

November 16, 2023

NAME__________TPLink TL-WR902AC information disclosurePlatforms Affected:TP-Link TL-WR902ACRisk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________TPLink TL-WR902AC could allow a remote attacker to obtain sensitive information, caused...

Intel oneAPI Toolkits and Component software privilege escalation | CVE-2023-24592

November 16, 2023

NAME__________Intel oneAPI Toolkits and Component software privilege escalationPlatforms Affected:Intel oneAPI Toolkits and Component software 2023Risk Level:7.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Intel oneAPI Toolkits...

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family code execution | CVE-2023-44317

November 16, 2023

NAME__________Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family code executionPlatforms Affected:Siemens SCALANCE XF-200BA Siemens SCALANCE XR-300WG...

Intel NUC Software information disclosure | CVE-2023-28723

November 16, 2023

NAME__________Intel NUC Software information disclosurePlatforms Affected:Intel Aptio* V UEFI Firmware Integrator ToolsRisk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Intel NUC Software could allow a...

Intel Battery Life Diagnostic Tool privilege escalation | CVE-2022-38786

November 16, 2023

NAME__________Intel Battery Life Diagnostic Tool privilege escalationPlatforms Affected:Intel Battery Life Diagnostic Tool 1.0.6 Intel Battery Life Diagnostic Tool 2.2.0Risk Level:6.7Exploitability:UnprovenConsequences:Gain...

Intel Battery Life Diagnostic Tool privilege escalation | CVE-2023-32662

November 16, 2023

Siemens SIMATIC PCS neo security bypass | CVE-2023-46096

November 16, 2023

NAME__________Siemens SIMATIC PCS neo security bypassPlatforms Affected:Siemens SIMATIC PCS neo 4.0Risk Level:6.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Siemens SIMATIC PCS neo could allow a...

GIMP code execution | CVE-2023-44443

November 16, 2023

Zoom Rooms for macOS privilege escalation | CVE-2023-43590

November 16, 2023

NAME__________Zoom Rooms for macOS privilege escalationPlatforms Affected:Zoom Zoom Rooms for macOS 5.14.9Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Zoom Rooms for macOS could allow...

Zoom clients denial of service | CVE-2023-39204

November 16, 2023

NAME__________Zoom clients denial of servicePlatforms Affected:Zoom Zoom Desktop Client for Windows Zoom Zoom Desktop Client for macOS Zoom Zoom Mobile...

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family denial of service | CVE-2023-44321

November 16, 2023

NAME__________Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family denial of servicePlatforms Affected:Siemens SCALANCE XF-200BA Siemens SCALANCE...

Adobe Media Encoder information disclosure | CVE-2023-47044

November 16, 2023

NAME__________Adobe Media Encoder information disclosurePlatforms Affected:Adobe Media Encoder 24.0.2 Adobe Media Encoder 23.6Risk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Media Encoder could allow...

Intel Optane SSD products information disclosure | CVE-2023-27879

November 16, 2023

NAME__________Intel Optane SSD products information disclosurePlatforms Affected:Intel Optane Intel Optane SSD DC P4800X Intel Optane SSD DC P4801X Series Intel...

Zoom clients information disclosure | CVE-2023-43588

November 16, 2023

NAME__________Zoom clients information disclosurePlatforms Affected:Zoom Meeting SDK for iOS Zoom Meeting SDK for Windows Zoom Meeting SDK for Mac Zoom...

Adobe InDesign information disclosure | CVE-2023-44346

November 16, 2023

NAME__________Adobe InDesign information disclosurePlatforms Affected:Adobe InDesign ID18.5 Adobe InDesign ID17.4.2Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe InDesign could allow a remote attacker to...

Multiple AMD processors information disclosure | CVE-2021-46766

November 16, 2023

NAME__________Multiple AMD processors information disclosurePlatforms Affected:AMD 1st Generation EPYC AMD 2nd Generation EPYC AMD 4th Generation EPYCRisk Level:1.6Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Multiple...

Month: November 2023

Intel NUC Software privilege escalation | CVE-2023-32660

GIMP code execution | CVE-2023-44444

Fortinet FortiOS and Fortinet FortiProxy denial of service | CVE-2023-36641

Intel Optane SSD products denial of service | CVE-2023-27306

TPLink TL-WR902AC information disclosure | CVE-2023-44447

Intel oneAPI Toolkits and Component software privilege escalation | CVE-2023-24592

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family code execution | CVE-2023-44317

Intel NUC Software information disclosure | CVE-2023-28723

Intel Battery Life Diagnostic Tool privilege escalation | CVE-2022-38786

Intel Battery Life Diagnostic Tool privilege escalation | CVE-2023-32662

Siemens SIMATIC PCS neo security bypass | CVE-2023-46096

GIMP code execution | CVE-2023-44443

Zoom Rooms for macOS privilege escalation | CVE-2023-43590

Zoom clients denial of service | CVE-2023-39204

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family denial of service | CVE-2023-44321

Adobe Media Encoder information disclosure | CVE-2023-47044

Intel Optane SSD products information disclosure | CVE-2023-27879

Zoom clients information disclosure | CVE-2023-43588

Adobe InDesign information disclosure | CVE-2023-44346

Multiple AMD processors information disclosure | CVE-2021-46766

Adobe InDesign information disclosure | CVE-2023-44343

GIMP buffer overflow | CVE-2023-44441

Zoom clients denial of service | CVE-2023-39206

Adobe InDesign information disclosure | CVE-2023-44342

US-CERT Vulnerability Summary for the Week of November 11, 2024

[DRAGONFORCE] – Ransomware Victim: SUSTA S[.]r[.]l[.]

[MEDUSA] – Ransomware Victim: Maxeon

[BLACKSUIT] – Ransomware Victim: eastgateauto[.]com

[ELDORADO] – Ransomware Victim: LA LUCKY Brand

You may have missed