136 matches found
CVE-2020-3257
Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 that are running Cisco IOS Software could allow an attacker to cause a denial of service DoS condition...
CVE-2020-3258
Cisco IOS Software CVE-2020-3258 affects Cisco 809/829 Industrial ISRs and CGR1000; a vulnerability in a diagnostic test CLI command can modify run-time memory, enabling an unauthenticated remote attacker or an authenticated local attacker to execute arbitrary code or cause a crash/reload. Exploi...
CVE-2020-3257 Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities
Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 that are running Cisco IOS Software could allow an attacker to cause a denial of service DoS condition...
CVE-2020-3257
CVE-2020-3257 affects the Cisco IOx Application Environment for IOS Software on Cisco 809/829 Industrial ISRs and CGR1000. ATLV/bounds checking issue in signaling packet handling can allow authenticated local attackers to execute arbitrary code with elevated privileges, while an adjacent attacker...
CVE-2020-3199
Cisco IOx Application Environment for IOS Software on Cisco Industrial Routers (809/829 ISR) and CGR1000 running IOS Software is affected by multiple vulnerabilities that can allow either DoS or arbitrary code execution with elevated privileges. Specifically, CVE-2020-3199 describes an adjacent a...
CVE-2020-3199 Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities
Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 that are running Cisco IOS Software could allow an attacker to cause a denial of service DoS condition...
CVE-2020-3210
CVE-2020-3210 affects Cisco IOS Software on Cisco 809/829 Industrial ISRs and CGR1000, where the CLI parsers for VDS-related commands fail to validate input. An authenticated local attacker with privilege level 15 can inject malicious input into VDS CLI arguments, gaining arbitrary commands execu...
CVE-2020-3205
CVE-2020-3205 — Cisco IOS inter-VM channel injection involves Cisco IOS Software on Cisco 809/829 Industrial ISRs and CGR1000, where insufficient validation of signaling packets to the Virtual Device Server (VDS) allows an unauthenticated, adjacent attacker to execute arbitrary shell commands wit...
Cross site scripting
An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext...
CVE-2018-14081
An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext...
CVE-2018-14081
An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext...
CVE-2018-14080
An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to download the configuration file...
CVE-2018-14080
An issue in D-Link DIR-809 (A1 ≤1.09, A2 ≤1.11, Guest Zone ≤1.09) allows bypassing authentication to download the device configuration file. Cause: deficiencies in the authentication procedure. Impact: unauthorized access to configuration data. Remediation: update to versions later than 1.09 (A1)...
CVE-2018-14080
An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to download the configuration file...
CVE-2018-14081
An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext...
CVE-2018-14081
CVE-2018-14081 affects D-Link DIR-809 devices (A1 up to 1.09, A2 up to 1.11, and Guest Zone up to 1.09). The root cause is storage of sensitive credentials (admin password and WPA key) in cleartext, enabling disclosure of protected information. Exploitation details are not provided in the availab...
PT-2018-3893 · D Link · D-Link Dir-809 A1 +2
Name of the Vulnerable Software and Affected Versions: D-Link DIR-809 A1 versions 1.09 and earlier D-Link DIR-809 A2 versions 1.11 and earlier D-Link DIR-809 Guest Zone versions 1.09 and earlier Description: The issue concerns the storage of device passwords, including the admin password and the...
PT-2018-3885 · D Link · D-Link Dir-809 A1 +2
Name of the Vulnerable Software and Affected Versions: D-Link DIR-809 A1 versions 1.09 and earlier D-Link DIR-809 A2 versions 1.11 and earlier D-Link DIR-809 Guest Zone versions 1.09 and earlier Description: An issue allows bypassing authentication mechanisms to download the configuration file. T...
Cisco 807, 809, and 829 Industrial Integrated Services Router Arbitrary Memory Write Vulnerability
The Cisco 807, 809, and 829 Industrial Integrated Services Routers are router products from Cisco, Inc.IOS Software is a set of operating systems developed by Cisco for its network devices that run on them. An arbitrary memory write vulnerability exists in the test subsystem embedded in the IOS...
Amazon Linux AMI : vim (ALAS-2017-809)
An integer overflow flaw was found in the way vim handled tree length values when reading an undo file. This bug could result in vim crashing when trying to process corrupted undo files. CVE-2017-6350 An integer overflow flaw was found in the way vim handled undo files. This bug could result in v...