25 matches found
EUVD-2017-3825
Malware in sbrugna...
EUVD-2017-15668
Malware in sbrugna...
EUVD-2017-3887
Malware in sbrugna...
EUVD-2019-10476
Malware in sbrugna...
PT-2019-3517
Name of the Vulnerable Software and Affected Versions Cisco Small Business series 250, 350, 350X, 550X affected versions not specified Cisco FindIT Network Probe affected versions not specified Description The issue is related to a hardcoded X.509 certificate public/private key pair in the softwa...
Cisco FindIT Privilege Escalation
The vulnerability of virtual machine systems for Cisco FindIT Network Management and Cisco FindIT Network Probe involves the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to gain increased privileges...
Cisco FindIT Network Manager Static Credentials Vulnerability
Cisco FindIT Network Manager is a network management tool for deploying and maintaining Cisco 100 to 500 series switches, routers, and wireless access points. A static credentials vulnerability exists in the virtual machine VM image of Cisco FindIT Network Manager 1.1.4. The vulnerability stems...
CVE-2019-1919
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
Design/Logic Flaw
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
PT-2019-2788
Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Management versions 1.1.4 Cisco FindIT Network Probe versions 1.1.4 Description The issue is related to the use of pre-installed credentials in virtual machine images. An attacker could exploit this to gain elevated...
CVE-2019-1919: Use of Hard-coded Credentials
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
Code injection
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to the device availability, confidentiality, and integrity, aka Insecure Library Loading. The vulnerability is due to...
CVE-2017-12314
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to the device availability, confidentiality, and integrity, aka Insecure Library Loading. The vulnerability is due to...
PT-2017-12486
Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Discovery Utility affected versions not specified Description A vulnerability could allow an authenticated, local attacker to perform a DLL preloading attack. The issue is due to the application loading a malicious copy of...
CVE-2017-12314: Uncontrolled Search Path Element
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to the device availability, confidentiality, and integrity, aka Insecure Library Loading. The vulnerability is due to...
CVE-2017-12252
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicio...
Design/Logic Flaw
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicio...
CVE-2017-12252: Improper Input Validation
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicio...
PT-2017-12428
Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Discovery Utility affected versions not specified Description A vulnerability could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability,...
Design/Logic Flaw
A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...