Skip to content
Noroxi

weston-embedded records

13 published records for vendor weston-embedded.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2023-31247
    40Plan

    A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-27882
    40Plan

    A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-45318
    40Plan

    A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitFeb 20, 2024

  • CVE-2023-25181
    40Plan

    A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-28379
    40Plan

    A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-28391
    39Monitor

    A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-24585
    39Monitor

    An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

    CriticalCVSS 9.8No exploitEPSS 1%

    silabs · gecko software development kitNov 14, 2023

  • CVE-2023-38562
    36Monitor

    A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.

    CriticalCVSS 9.1No exploitEPSS 1%

    weston-embedded · uc-tcp-ipFeb 20, 2024

  • CVE-2022-41985
    30Monitor

    An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00.

    HighCVSS 7.5No exploitEPSS 1%

    weston-embedded · uc-ftpsMay 10, 2023

  • CVE-2022-46377
    30Monitor

    An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.

    HighCVSS 7.5No exploitEPSS 1%

    weston-embedded · uc-ftpsMay 10, 2023

  • CVE-2022-46378
    30Monitor

    An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.

    HighCVSS 7.5No exploitEPSS 1%

    weston-embedded · uc-ftpsMay 10, 2023

  • CVE-2023-39540
    23Monitor

    A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.

    MediumCVSS 5.9No exploitEPSS 0%

    weston-embedded · uc-tcp-ipFeb 20, 2024

  • CVE-2023-39541
    23Monitor

    A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01.

    MediumCVSS 5.9No exploitEPSS 0%

    weston-embedded · uc-tcp-ipFeb 20, 2024