Monthly Archives: November 2016

NVD

CVE-2016-8672 (simatic_cp_343-1_firmware, simatic_cp_443-1_firmware, simatic_s7_300_cpu_firmware, simatic_s7_400_cpu_firmware)

The integrated web server on Siemens SIMATIC CP 343-1 Advanced before 3.0.53, SIMATIC CP 443-1 Advanced, SIMATIC S7-300 CPU, and SIMATIC S7-400 CPU devices does not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.

NVD

CVE-2016-9567 (samsung_mobile)

The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device’s screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The Samsung ID is SVE-2016-6343.

Redhat

RHSA-2016:2820-1: Important: memcached security update

Red Hat Enterprise Linux: An update for memcached is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
CVE-2016-8704, CVE-2016-8705

Redhat

RHSA-2016:2819-1: Important: memcached security update

Red Hat Enterprise Linux: An update for memcached is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
CVE-2016-8704, CVE-2016-8705, CVE-2016-8706