Julien Lenoir

The issue is related to improper input validation in some Intel WiFi products, which may allow an unauthenticated user to potentially enable denial of service via local access. This could be exploited by a remote attacker to cause a denial of service.

The issue is related to an out-of-bounds write in the Intel(R) PROSet/Wireless WiFi software, which may allow an unauthenticated user to potentially enable denial of service via adjacent access. This can be exploited to cause a denial of service.

The issue is related to insecure default variable initialization, which may allow an unauthenticated user to enable information disclosure via physical access. This is due to errors in initialization. Exploitation of the issue may allow an attacker to disclose protected information.

Name of the Vulnerable Software and Affected Versions: Das U-Boot versions prior to 2021.04-rc2 Description: The boot loader in Das U-Boot mishandles use of unit addresses in a FIT. Recommendations: For versions prior to 2021.04-rc2, update to version 2021.04-rc2 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Das U-Boot versions prior to 2021.04-rc2 Description: The issue concerns the boot loader in Das U-Boot, which mishandles a modified FIT. Recommendations: For versions prior to 2021.04-rc2, update to version 2021.04-rc2 or later to resolve the issue.

An issue has been discovered that allows an attacker to bypass function code filtering by sending malformed or crafted ModBus packets to a protected asset. This is due to improper handling of the `mbap.length` field of ModBus packets in the ModBus DPI filter.

The issue is related to design flaws in OPC classic and custom netfilter modules, allowing an attacker to remotely activate rules on the firewall and connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology involves a crafted OPC dynamic port shift. This is due to errors in security settings of the OPC Classic protocol implementation.