PT-2021-12595

Name of the Vulnerable Software and Affected Versions: Bosch FSM-2500 server versions up to and including 5.2 Bosch FSM-5000 server versions up to and including 5.2 Description: The issue allows an unauthenticated remote attacker to log into the database with admin-privileges due to the use of...

Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read (cisco-sa-staros-file-read-L3RDvtey)

According to its self-reported version, the Cisco StarOS operating system on the remote Cisco ASR 5000 series router is affected by an arbitrary file read vulnerability due to insecure handling of symbolic links. An authenticated, remote attacker can exploit this, by sending a crafted SFTP comman...

CVE-2020-6779

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of...

Cisco StarOS Arbitrary File Read Vulnerability

Cisco StarOS is a router operating system that controls the entire system logic and can control processes and CLIs. An arbitrary file read vulnerability exists in Secure FTP SFTP in Cisco StarOS versions prior to 21.19.7 used in Cisco ASR 5000 series routers, which can be exploited by an attacker...

Design/Logic Flaw

A vulnerability in the Secure FTP SFTP of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the affected device. The...

CVE-2021-1145

CVE-2021-1145 affects Cisco StarOS for the Cisco ASR 5000 Series Routers. The vulnerability is due to insecure handling of symbolic links in Secure FTP (SFTP); with valid credentials, an authenticated attacker could read arbitrary files on the device by sending a crafted SFTP command. Cisco’s adv...

CVE-2021-1145 Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability

A vulnerability in the Secure FTP SFTP of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the affected device. The...

CVE-2021-1145 Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability

A vulnerability in the Secure FTP SFTP of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the affected device. The...

Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability

A vulnerability in the Secure FTP SFTP of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the affected device. The...

CVE-2021-1145: UNIX Symbolic Link (Symlink) Following

A vulnerability in the Secure FTP SFTP of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the affected device. The...

Cisco StarOS for Cisco ASR 5000 Series Routers 后置链接漏洞

Cisco StarOS is a router operating system that controls the entire system logic and can control processes and CLIs. An arbitrary file read vulnerability exists in Secure FTP SFTP in Cisco StarOS versions prior to 21.19.7 used in Cisco ASR 5000 series routers, which can be exploited by an attacker...

BACKDOOR.WIN32.BNLITE Remote Heap Corruption

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/f78cef7588f9c32609a4932d10c67f95.txt Contact: [email protected] Media: twitter.com/malvuln Threat: BACKDOOR.WIN32.BNLITE Vulnerability: Remote Heap Corruption Description: When sending a specially...

Cisco IOS XR Software Slow Path Forwarding Denial of Service Vulnerability

A vulnerability in the egress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers and Cisco Network Convergence System NCS 5000 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...

PT-2020-4888

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers affected versions not specified Cisco Network Convergence System NCS 5000 Series Routers affected versions not specified Description: A vulnerability in the packet...

CVE-2020-1685

When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol VXLAN, the discard action will fail to discard traffic under certain conditions. Given a firewall filter configuration similar to: family ethernet-switching...

CVE-2020-1685

CVE-2020-1685 affects Juniper Networks Junos OS on EX4600 and QFX5K (VXLAN) where stateless firewall filters with a single user-vlan-id match can cause the discard action to only drop traffic with that VLAN ID, allowing other VLANs through. Affected QFX5K/Junos versions are listed in the CVE entr...

Cisco StarOS Privilege Escalation (cisco-sa-staros-privilege-esc-pyb7YTd)

According to its self-reported version, the Cisco StarOS operating system on the remote Cisco ASR 5000 series router is affected by a privilege escalation vulnerability due to insufficient validation of CLI commands. An authenticated, local attacker can exploit this, by sending crafted commands t...

Cisco StarOS Privilege Escalation (cisco-sa-staros-priv-esc-gGCUMFxv)

According to its self-reported version, the Cisco StarOS operating system on the remote Cisco ASR 5000 series router is affected by a privilege escalation vulnerability due to insufficient validation of CLI commands. An authenticated, local attacker can exploit this, by sending crafted commands t...

CVE-2020-3602

A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device. The vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this...

CVE-2020-3602

A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device. The vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this...