The vulnerability of the ZingBox Inspector, a network traffic processor, arises due to the lack of protection against ARP information spoofing. This allows attackers to increase their privileges.

The vulnerability of the ZingBox Inspector network traffic processor exists due to the lack of protection against ARP information spoofing. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2019-15022

A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be susceptible to ARP spoofing...

The vulnerability of D-Link router microprogramming software arises from insufficient validation of input data, allowing attackers to circumvent the separation between the host network and the guest network.

The vulnerability of D-Link router microprogramming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to circumvent the separation between the host network and the guest network by sending a specially...

D-Link DIR-825AC G1 Access Control Error Vulnerability

The D-Link DIR-825 is an AC 1200 Wi-Fi dual-band Gigabit LAN/WAN router. A security vulnerability exists in the D-link DIR-825AC G1. The vulnerability stems from insufficient isolation between a host network and a client network established by the same device. An attacker could exploit the...

PT-2019-3096 · D Link · D-Link Dir-825Ac G1

Name of the Vulnerable Software and Affected Versions: D-link DIR-825AC G1 versions affected versions not specified Description: The issue is related to insufficient compartmentalization between a host network and a guest network established by the same device. These devices forward ARP requests...

Wind River Systems VxWorks Parameter Injection Vulnerability (CNVD-2019-25702)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A parameter injection vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability by sending a reverse ARP response to an affected system to assign a unicast IPv...

CVE-2018-0063

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces IRIs next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existin...

Tcpdump ARP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.ARP parser is one of the address resolution protocol parsers. A...

UBUNTU-CVE-2017-13013

The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions...

Rockwell Automation Allen-Bradley Micro850 PLC Has Denial of Service Vulnerability

The Allen-Bradley Micro850 is a programmable logic controller PLC from Rockwell Automation, Inc. The Rockwell Allen-Bradley Micro850 PLC suffers from a Gratuitous ARP Denial of Service vulnerability, which can be exploited to cause a network failure of the Micro850 PLC by sending two consecutive...

AB 1769 PLC ARP Syntax Denial of Service Vulnerability

The AB 1769 PLC is an all-in-one, industrial-grade, high-performance programmable controller. The AB 1769 PLC suffers from an ARP syntax denial of service vulnerability. An attacker can cause the device protocol stack to crash or even cause the device to go down by modifying the ARP header...

openstack-neutron: MAC source address spoofing vulnerability

Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...

openstack-neutron: DHCP spoofing vulnerability

Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...

openstack-neutron: ICMPv6 source address spoofing vulnerability

Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...

openstack-neutron: MAC source address spoofing vulnerability

Neutron functionality includes internal firewall management between networks. Due to the relaxed nature of particular rules, it is possible for machines on the same layer 2 networks to forge non-IP traffic, such as ARP and DHCP requests...

The vulnerability of the microprogrammed software of the D–Link DSR–250 router allows a malicious individual to intercept network traffic.

The microprogrammed software of the D-Link DSR-250 router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to intercept network traffic.

The Zyxel ZyWALL USG 300 network interface card/mesh router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting traffic processed by this router through ARP spoofing attacks...

The vulnerability of the microprogrammed software of the D–Link DSR–150 router allows a malicious individual to intercept network traffic.

The microprogrammed software of the D-Link DSR-150 router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...

The vulnerability of the Windows operating system allows a malicious individual to trigger a service failure or redirect network traffic.

Due to the absence of an ARP packet authentication mechanism in the Windows operating system, a malicious individual can send a false ARP response, thereby replacing the entry in the ARP table and, in turn, changing the routing of network packets to the device whose entry in the ARP table has bee...

The vulnerability of the embedded software of the Fanuc 32i numerical control system allows a malicious individual to gain access to information transmitted over the network.

The software of FANUC 32i numerical control machines contains a vulnerability that stems from the lack of ARP packet authentication in the IPv4 protocol. This makes the software of FANUC 32i numerical control machines vulnerable to “ARP spoofing” attacks. Exploiting this vulnerability allows a...