CVE-2017-13724: Improper Neutralization of Input During Web Page Generation

On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page...

PT-2017-13045

Name of the Vulnerable Software and Affected Versions Axesstel MU553S version MU55XS-V1.14 Description The issue concerns a Stored Cross Site Scripting vulnerability. It is located in the APN parameter under the "Basic Settings" page. Recommendations For version MU55XS-V1.14, avoid using the APN...

November 8, 2016 — KB3198585 (OS Build 10240.17190)

None None...

November 8, 2016 — KB3200970 (OS Build 14393.447)

None None...

October 11, 2016 — KB3192440 (OS Build 10240.17146)

None None...

October 11, 2016 — KB3194798 (OS Build 14393.321)

None None...

September 13, 2016 — KB3185614 (OS Build 10586.589)

None None...

Wireshark 1.10.x < 1.10.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.10.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.9 advisory. - The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in...

CVE-2014-5163

The APN decode functionality in 1 epan/dissectors/packet-gtp.c and 2 epan/dissectors/packet-gsmagm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service application...

Code injection

The APN decode functionality in 1 epan/dissectors/packet-gtp.c and 2 epan/dissectors/packet-gsmagm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service application...

CVE-2014-5163

The APN decode functionality in 1 epan/dissectors/packet-gtp.c and 2 epan/dissectors/packet-gsmagm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service application...

CVE-2014-5163

The APN decode functionality in 1 epan/dissectors/packet-gtp.c and 2 epan/dissectors/packet-gsmagm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service application...

CVE-2014-5163

The APN decode functionality in 1 epan/dissectors/packet-gtp.c and 2 epan/dissectors/packet-gsmagm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service application...