NVD disclosure day

Published threat advisories for October 19, 2022

CVE-2022-41415

Acer Altos Firmware Stack Overflow Denial of Service

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A stack overflow vulnerability exists in Acer server firmware's RevserveMem component, allowing network-accessible, unauthenticated attackers to inject crafted shellcode into NVRAM variables. This could lead to a Denial of Service, impacting the availability of affected Acer Altos server hardware.

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2016-20017

D-Link DSL-2750B Command Injection Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

D-Link DSL-2750B devices are affected by a command injection vulnerability that allows remote, unauthenticated attackers to execute arbitrary commands. This poses a business risk by enabling unauthorized access to and control over affected devices.

NVD modified: NVD date unavailable • CISA KEV