PT-2019-2129

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.5140.0 Description A vulnerability in the Secure Shell SSH server implementation could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device. T...

PT-2019-1984

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.2.170.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.5.150.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.8.100.0 Description A vulnerability in...

PT-2019-1983

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.2.170.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.5.150.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.8.100.0 Description A vulnerability in...

CVE-2019-3915: Authentication Bypass by Capture-replay

Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface...

Cisco IOS Software Hot Standby Router Protocol Information Leak Vulnerability

According to its self-reported version, Cisco IOS Software is affected by following vulnerability - A vulnerability in the Hot Standby Router Protocol HSRP subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially sensitive information fro...

Design/Logic Flaw

A vulnerability in the Hot Standby Router Protocol HSRP subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially sensitive information from an affected device. The vulnerability is due to insufficient memory initialization. An attacker...

CVE-2019-1761

A vulnerability in the Hot Standby Router Protocol HSRP subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially sensitive information from an affected device. The vulnerability is due to insufficient memory initialization. An attacker...

Input validation

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

CVE-2019-1746

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

CVE-2019-1758: Improper Authentication

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could...

CVE-2019-1746 Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

PT-2019-1754

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE Software affected versions not specified Description A vulnerability in the Hot Standby Router Protocol HSRP subsystem could allow an unauthenticated, adjacent attacker to receive potentially sensitive information from an...

CVE-2019-1746: Improper Input Validation

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

PT-2019-1707

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the Cluster Management Protocol CMP processing code could allow an unauthenticated, adjacent attacker to trigger a denial of service Do...

CVE-2019-1749: Improper Input Validation

A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router ASR 900 Route Switch Processor 3 RSP3 could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The...

CVE-2019-6540

The CVE-2019-6540 issue is concrete: the Conexus telemetry protocol used by Medtronic MyCareLink/CareLink devices and related CRT-D/ICD hardware does not encrypt communications (Cleartext Transmission of Sensitive Information) and, per ICS-CERT, can be exploited by an attacker with adjacent, shor...

PT-2019-18152

Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Monitor versions 24950 through 24952 CareLink Monitor version 2490C CareLink 2090 Programmer Amplia CRT-D Claria CRT-D Compia CRT-D Concerto CRT-D Concerto II CRT-D Consulta CRT-D Evera ICD Maximo II CRT-D and ICD Mirro IC...

CVE-2019-6538

The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro IC...

(0Day) (Pwn2Own) Xiaomi Mi6 Captive Portal Whitelist Bypass Remote Code Execution Vulnerability

This vulnerability allows network adjacent attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6. User interaction is required to exploit this vulnerability in that the target must connect to a malicious access point. The specific flaw exists within the handling of...

CVE-2019-1617

Cisco NX-OS Software on Nexus 9000 Series Switches in Standalone NX-OS Mode is affected by CVE-2019-1617. The issue stems from incorrect processing of FCoE packets when the fcoe-npv feature is uninstalled, enabling an unauthenticated adjacent attacker to cause a denial of service by sending a str...