Vulnerabilities fixed in Nucleus NET stack

Forescout researchers have found 13 vulnerabilities in the Siemens Nucleus NET stack. This is a network stack that is used by both Siemens products as well as products from other vendors used. The vulnerabilities have collectively been named "NUCLEUS:13." assigned. The vulnerabilities were found ...

Siemens Nucleus ReadyStart 安全漏洞

Siemens Nucleus ReadyStart is a bundled solution from Siemens Germany. A denial-of-service vulnerability exists in Siemens Nucleus ReadyStart, which is used to accelerate the fast startup of complete systems and provides a rich board-level support package Bsp. The vulnerability stems from the...

PT-2021-6895 · Mentor Graphics +1 · Nucleus Net +9

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions prior to V2303 Capital Embedded AR Classic R20-11 versions prior to V2303 PLUSCONTROL 1st Gen versions prior to the fixed version SIMOTICS CONNECT 400 versions prior to V0.5.0.0 SIMOTICS CONNECT 40...

CVE-2021-42076

An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component aka the server-side implementation of Barrier and barrierc by sending long TCP messages...

CVE-2021-34793

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service DoS vulnerability. This...

The vulnerability of the WebRTC component in the Google Chrome web browser, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC component in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions through a specially create...

Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliances Software（ASA Software） 安全漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A security vulnerability exists in Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software, which is caused by an error in the...

PT-2022-4748 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the sctp make strreset req function in net/sctp/sm make chunk.c in the SCTP network protocol. This issue is related to an attempt to use more buffer than is...

CVE-2021-0297

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...

Siemens Sinumerik 808D 缓冲区错误漏洞

SINUMERIK CNCs provide automation solutions for shop floor, workshop and large volume production environments. a denial of service vulnerability exists in Siemens SINUMERIK Controllers. the vulnerability stems from the fact that the affected device fails to properly handle certain specially craft...

PT-2021-4649 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the implementation of the TCP/IP protocol in Microsoft Windows operating systems, caused by insufficient input validation. This...

Digi RealPort 安全漏洞

Digi RealPort is a proprietary Serial-over-LAN encapsulation protocol. It provides virtual connectivity to serial devices anywhere on the network by encapsulating ICS protocol data in a TCP-based protocol.A security vulnerability exists in Digi RealPort that could be exploited by an attacker to...

Design/Logic Flaw

A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...

CVE-2021-34740 Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability

A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...

CVE-2021-34740

Cisco Aironet Access Point software is affected by CVE-2021-34740, a WLAN Control Protocol (WCP) packet buffer leak DoS. An unauthenticated, adjacent attacker can send crafted 802.11 frames to an AP interface to trigger buffer leaks, leading to buffer allocation failures and a device reload. Root...

CVE-2021-34740 Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability

A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...

Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability

A vulnerability in the WLAN Control Protocol WCP implementation for Cisco Aironet Access Point AP software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to incorrect error handli...

多款 Cisco 产品资源管理错误漏洞

Cisco IOS is a suite of operating systems developed for its network devices.IOS XE is a suite of operating systems developed for its network devices.SD-WAN Software is one of the suites of software-defined WAN software.Wire is a chat software. The software supports Web, WindowsiOS, Android, and O...

多款 Cisco 产品资源管理错误漏洞

Cisco IOS is a suite of operating systems developed for its network devices.IOS XE is a suite of operating systems developed for its network devices.SD-WAN Software is one of the suites of software-defined WAN software.Wire is a chat software. The software supports Web, WindowsiOS, Android, and O...

Cisco Aironet Access Points 缓冲区错误漏洞

Cisco Aironet Access Points aps is a network access point device from Cisco. A buffer error vulnerability exists in Cisco Aironet Access Points, which stems from an improper implementation of the product's WLAN Control Protocol WCP that prevents the proper handling of unexpected 802.11 data. An...