HF
Product
H410c Firmware
On CISA KEVExploited in the wildRansomware-linked
240
CVEs
13
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 158Medium 72Low 3
Watch
Add H410c Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3998 | 7.5 | Aug 24 | A flaw was found in glibc Affected: All versions, or not specified |
| CVE-2022-1678 | 7.5 | May 25 | An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote… Affected: All versions, or not specified |
| CVE-2022-1183 | 7.5 | May 19 | On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure Affected: All versions, or not specified |
| CVE-2018-25032 | 7.5 | Mar 25 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches Affected: All versions, or not specified |
| CVE-2022-0635 | 7.5 | Mar 23 | Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion… Affected: All versions, or not specified |
| CVE-2022-0667 | 7.5 | Mar 22 | When the vulnerability is triggered the BIND process will exit Affected: All versions, or not specified |
| CVE-2022-0742 | 7.5 | Mar 18 | Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131 Affected: All versions, or not specified |
| CVE-2022-23308 | 7.5 | Feb 26 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes Affected: All versions, or not specified |
| CVE-2021-45485 | 7.5 | Dec 25 | In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't… Affected: All versions, or not specified |
| CVE-2021-45100 | 7.5 | Dec 16 | The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled Affected: All versions, or not specified |
| CVE-2021-4044 | 7.5 | Dec 14 | Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server Affected: All versions, or not specified |
| CVE-2021-43618 | 7.5 | Nov 15 | GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation… Affected: All versions, or not specified |
| CVE-2020-25672 | 7.5 | May 25 | A memory leak vulnerability was found in Linux kernel in llcp_sock_connect Affected: All versions, or not specified |
| CVE-2020-12243 | 7.5 | Apr 28 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash) Affected: All versions, or not specified |
| CVE-2020-7595 | 7.5 | Jan 21 | xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation Affected: All versions, or not specified |
| CVE-2019-16995 | 7.5 | Sep 30 | In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka… Affected: All versions, or not specified |
| CVE-2019-15538 | 7.5 | Aug 25 | An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9 Affected: All versions, or not specified |
| CVE-2018-16871 | 7.5 | Jul 30 | A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20 Affected: All versions, or not specified |
| CVE-2024-33602 | 7.4 | May 6 | nscd: netgroup cache assumes NSS callback uses in-buffer strings Affected: All versions, or not specified |
| CVE-2020-13817 | 7.4 | Jun 4 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for… Affected: All versions, or not specified |
| CVE-2024-33601 | 7.3 | May 6 | nscd: netgroup cache may terminate daemon on memory allocation failure Affected: All versions, or not specified |
| CVE-2022-2068 | 7.3 | Jun 21 | The c_rehash script allows command injection Affected: All versions, or not specified |
| CVE-2020-25643 | 7.2 | Oct 6 | A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7 Affected: All versions, or not specified |
| CVE-2023-1380 | 7.1 | Mar 27 | A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel Affected: All versions, or not specified |
| CVE-2022-47520 | 7.1 | Dec 18 | An issue was discovered in the Linux kernel before 6.0.11 Affected: All versions, or not specified |
| CVE-2022-3202 | 7.1 | Sep 14 | A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel Affected: All versions, or not specified |
| CVE-2021-4204 | 7.1 | Aug 24 | An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation Affected: All versions, or not specified |
| CVE-2022-1973 | 7.1 | Aug 5 | A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal Affected: All versions, or not specified |
| CVE-2022-1671 | 7.1 | Jul 26 | A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel Affected: All versions, or not specified |
| CVE-2022-1353 | 7.1 | Apr 29 | A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel Affected: All versions, or not specified |
| CVE-2021-3739 | 7.1 | Mar 10 | A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’ Affected: All versions, or not specified |
| CVE-2021-3743 | 7.1 | Mar 4 | An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel Affected: All versions, or not specified |
| CVE-2021-4090 | 7.1 | Feb 18 | An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel Affected: All versions, or not specified |
| CVE-2021-3752 | 7.1 | Feb 16 | A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition Affected: All versions, or not specified |
| CVE-2021-3501 | 7.1 | May 6 | A flaw was found in the Linux kernel in versions before 5.12 Affected: All versions, or not specified |
| CVE-2021-3506 | 7.1 | Apr 19 | An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4 Affected: All versions, or not specified |
| CVE-2020-9383 | 7.1 | Feb 25 | An issue was discovered in the Linux kernel 3.16 through 5.5.6 Affected: All versions, or not specified |
| CVE-2025-0665 | 7.0 | Feb 5 | eventfd double close Affected: All versions, or not specified |
| CVE-2023-1077 | 7.0 | Mar 27 | In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy… Affected: All versions, or not specified |
| CVE-2022-45919 | 7.0 | Nov 27 | An issue was discovered in the Linux kernel through 6.0.10 Affected: All versions, or not specified |
| CVE-2022-45886 | 7.0 | Nov 25 | An issue was discovered in the Linux kernel through 6.0.9 Affected: All versions, or not specified |
| CVE-2022-45885 | 7.0 | Nov 25 | An issue was discovered in the Linux kernel through 6.0.9 Affected: All versions, or not specified |
| CVE-2022-45884 | 7.0 | Nov 25 | An issue was discovered in the Linux kernel through 6.0.9 Affected: All versions, or not specified |
| CVE-2022-2961 | 7.0 | Aug 29 | A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the… Affected: All versions, or not specified |
| CVE-2022-1734 | 7.0 | May 18 | A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup… Affected: All versions, or not specified |
| CVE-2022-1048 | 7.0 | Apr 29 | A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params Affected: All versions, or not specified |
| CVE-2022-28796 | 7.0 | Apr 8 | jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition Affected: All versions, or not specified |
| CVE-2021-3640 | 7.0 | Mar 3 | A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of… Affected: All versions, or not specified |
| CVE-2021-3609 | 7.0 | Mar 3 | .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or… Affected: All versions, or not specified |
| CVE-2021-4083 | 7.0 | Jan 18 | A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and… Affected: All versions, or not specified |
