Unauthorized Error Injection Can Degrade Hardware Redundancy

An unauthorized agent can inject errors into a redundant block to deprive the system of redundancy or put the system in a degraded operating mode.

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-25159 - - Apr 15, 2026 Mar 11, 2026 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expres...Show more Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OGNL payloads in the redirect parameter to instantiate ProcessBuilder objects and execute system commands with root privileges.Show less
CVE-2022-41804 3Debian FedoraprojectIntel 192Debian Linux FedoraXeon Bronze 3408u Firmware+189 more Jun 17, 2026 Aug 11, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-25159

Apr 15, 2026

Mar 11, 2026

9.3 CRITICAL· v4

9.8 CRITICAL· v3

N/A· v2

Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OGNL payloads in the redirect parameter to instantiate ProcessBuilder objects and execute system commands with root privileges.Show less

CVE-2022-41804

3Debian

FedoraprojectIntel

192Debian Linux

FedoraXeon Bronze 3408u Firmware+189 more

Jun 17, 2026

Aug 11, 2023

N/A· v4

6.7 MEDIUM· v3

N/A· v2

Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.