CVE-2018-0303

A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on the affected device. The vulnerability exists because of...

CVE-2018-0331: Improper Input Validation

A vulnerability in the Cisco Discovery Protocol formerly known as CDP subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent attacker to create a denial of service DoS condition. The vulnerability is due to a failure t...

CVE-2018-0292

A vulnerability in the Internet Group Management Protocol IGMP Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in...

PT-2018-8732

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A buffer overflow condition in the IGMP Snooping subsystem of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full...

CVE-2018-0263

A vulnerability in Cisco Meeting Server CMS could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces and ports o...

CVE-2018-0263

The CVE-2018-0263 entry describes a misconfiguration vulnerability in Cisco Meeting Server (CMS) 2000 Platforms, where an incorrect default configuration exposes internal interfaces/ports on the external interface. This allows an unauthenticated, adjacent attacker to access configuration and data...

PT-2018-8709

Name of the Vulnerable Software and Affected Versions: Cisco Meeting Server CMS versions prior to 2.2.13 Cisco Meeting Server CMS versions prior to 2.3.4 Description: A vulnerability in Cisco Meeting Server could allow an unauthenticated, adjacent attacker to access services running on internal...

Cisco Meeting Server Information Disclosure Vulnerability

A vulnerability in Cisco Meeting Server CMS could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces and ports o...

BD Kiestra and InoquIA Systems (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable from adjacent network Vendor : Becton, Dickinson and Company BD Equipment : BD Kiestra and InoqulA systems Vulnerabilities : Product UI does not Warn User of Unsafe Actions 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

Design/Logic Flaw

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

Command injection

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8866: Improper Neutralization of Special Elements used in an OS Command

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8860: Exposure of Sensitive Information to an Unauthorized Actor

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

PT-2018-18676

Name of the Vulnerable Software and Affected Versions Vecna VGo Robot versions prior to 3.0.3.52164 Description An issue exists where an attacker on an adjacent network could perform command injection. Recommendations For versions prior to 3.0.3.52164, update to version 3.0.3.52164 or later to...