CVE-2023-22577 White Rabbit Switch - Password Disclosure Vulnerability

Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings...

CVE-2023-22577 White Rabbit Switch - Password Disclosure Vulnerability

Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings...

CVE-2023-22577

The CVE-2023-22577 issue affects White Rabbit Switch, where an unauthenticated user can retrieve sensitive information (password hashes and SNMP community strings). Connected sources consistently describe information disclosure as the impact. Root cause details are not explicitly provided in the ...

PT-2023-18561 · Unknown · White Rabbit Switch

Name of the Vulnerable Software and Affected Versions: White Rabbit Switch affected versions not specified Description: The issue allows an unauthenticated user to retrieve sensitive information, including password hashes and SNMP community strings. Recommendations: At the moment, there is no...

CVE-2023-22577: Exposure of Sensitive Information to an Unauthorized Actor

Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings...

CVE-2021-38412

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...

Authentication flaw

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...

CVE-2021-38412

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...

Digi PortServer TS 访问控制错误漏洞

Digi PortServer TS is used by Digital Networks Malaysia Digi for easy serial to Ethernet connectivity. An Access Control Error vulnerability exists in Digi PortServer TS 16, which stems from properly formatted POST requests for multiple resources on the software's HTTP and HTTPS web servers that ...

SNMP – Simply Not My Problem. Or is it?

TL;DR: Use SNMPv3; long gone is default community strings, hello complex passwords! Remove from the internet, if required, implement a VPN solution to restrict access to only authorised parties. SNMP is a protocol used for the remote management of devices on a network. By remote, we mean access...

Information disclosure

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability in the AMI BMC firmware in which default SNMP community strings are used, which may lead to information disclosure...

CVE-2020-11489

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability in the AMI BMC firmware in which default SNMP community strings are used, which may lead to information disclosure...

CVE-2020-11489

NVIDIA DGX servers are affected by CVE-2020-11489 due to a vulnerability in the AMI BMC firmware where default SNMP community strings may lead to information disclosure. Affected systems include DGX-1 with BMC firmware prior to 3.38.30 and DGX-2 with BMC firmware prior to 1.06.06. NVIDIA’s securi...

CVE-2020-11489: Initialization of a Resource with an Insecure Default

NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability in the AMI BMC firmware in which default SNMP community strings are used, which may lead to information disclosure...

PT-2020-12641

Name of the Vulnerable Software and Affected Versions NVIDIA DGX-1 versions prior to 3.38.30 NVIDIA DGX-2 versions prior to 1.06.06 Description The issue concerns the use of default SNMP community strings in the AMI BMC firmware, potentially leading to information disclosure. Recommendations For...

Security Bulletin: AMI Baseboard Management Controller (BMC) Firmware Vulnerabilities in NVIDIA DGX-1, DGX-2, and DGX A100 Servers - October 2020

NVIDIA has released a firmware security update for NVIDIA DGX™ servers. This update addresses security issues in the AMI Baseboard Management Controller BMC firmware that may lead to remote code execution, elevation of privileges, or information disclosure. All issues require network access to th...

CVE-2019-13205

All configuration parameters of certain Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files th...

PT-2020-9394

Name of the Vulnerable Software and Affected Versions: Kyocera printers versions 2R7 2000.001.701 Description: The issue allows unauthenticated users to access all configuration parameters of certain Kyocera printers. Although this information is only presented in the menus when authenticated and...

Schneider Electric Modicon M580 UMAS cleartext data transmission vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. An attacker can sniff network traffic to exploit this vulnerability. Tested Versions Schneider Electric...

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure Exploit

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an information disclosure, resulting in the exposure of confidential information, including, but...