EUVD-2019-10396

Malware in sbrugna...

EUVD-2018-7269

Malware in sbrugna...

Cisco Remote PHY Command Injection Privilege Escalation

The vulnerability of Cisco Remote PHY device software relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands in the Linux shell with root privileges...

CVE-2020-3176: Improper Neutralization of Special Elements used in a Command

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exists because the affected software does not properly sanitize user-supplied input. An...

PT-2020-1827

Name of the Vulnerable Software and Affected Versions Cisco Remote PHY Device Software affected versions not specified Description A vulnerability in the software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root...

CVE-2019-1839

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attack...

Input validation

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attack...

CVE-2019-1839: Improper Input Validation

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attack...

PT-2019-3076

Name of the Vulnerable Software and Affected Versions Cisco Remote PHY Device Software affected versions not specified Description The issue is related to insufficient input validation, which could allow an attacker to execute arbitrary commands on the underlying Linux shell with root privileges...

Cisco Remote PHY Software Resource Management Error Vulnerability

Cisco Remote PHY Software is a digital fiber-based DOCSIS solution from Cisco. The program uses Ethernet PON EPON and metro network as the transmission network. A resource management error vulnerability exists in the IPv4 fragmentation function in Cisco Remote PHY Software. A remote attacker coul...

CVE-2018-15391

A vulnerability in certain IPv4 fragment-processing functions of Cisco Remote PHY Software could allow an unauthenticated, remote attacker to impact traffic passing through a device, potentially causing a denial of service DoS condition. The vulnerability is due to the affected software not...

CVE-2018-15391

Cisco CVE-2018-15391 concerns Cisco Remote PHY Software and a vulnerability in IPv4 fragment-processing functions. An unauthenticated, remote attacker could send malformed IPv4 traffic to an affected device, exploiting improper validation/calculation of certain numerical values in IPv4 packets to...

CVE-2018-15391: Incorrect Calculation

A vulnerability in certain IPv4 fragment-processing functions of Cisco Remote PHY Software could allow an unauthenticated, remote attacker to impact traffic passing through a device, potentially causing a denial of service DoS condition. The vulnerability is due to the affected software not...

PT-2018-13009

Name of the Vulnerable Software and Affected Versions Cisco Remote PHY Software affected versions not specified Description A vulnerability in certain IPv4 fragment-processing functions could allow an unauthenticated, remote attacker to impact traffic passing through a device, potentially causing...