TI-2024-15911 CVE-2024-23923 · GHSA-4grv-37wf-jg36
Use after free in Alpine Halo9
Priority MEDIUM 41
Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability.
Alpine
Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
Alpine records in CISA KEVNo Alpine vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Ilx-f509 Firmware · all components
TI-2024-15941 CVE-2024-23963 · GHSA-5235-m374-99w3
Alpine Halo9 Stack-based Buffer Overflow
Priority LOW 37
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices.
TI-2024-15918 CVE-2024-23935 · GHSA-jh62-xx57-p239
Stack-based buffer overflow in Alpine Halo9
Priority LOW 37
Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability.
TI-2024-15939 CVE-2024-23961 · GHSA-h37g-6773-5r89
OS command injection in Alpine Halo9
Priority LOW 34
Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability.
TI-2024-15912 CVE-2024-23924 · GHSA-xrh7-mhgj-f2r5
OS command injection in Alpine Halo9
Priority LOW 34
Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability.
TI-2024-15940 CVE-2024-23962 · GHSA-4pmj-qpm8-x7gv
Alpine Halo9 Missing Authentication
Priority LOW 31
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 devices.
TI-2024-15938 CVE-2024-23960 · GHSA-m5hr-8xhp-qgx7
Improper signature verification in Alpine Halo9
Priority LOW 21
Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability.