CVE-2022-23237

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

CVE-2022-23237: URL Redirection to Untrusted Site

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites...

PT-2022-15914

Name of the Vulnerable Software and Affected Versions E-Series SANtricity OS Controller Software versions 11.x through 11.70.2 Description The issue allows an attacker to perform host header injection attacks, potentially redirecting users to malicious websites. Recommendations For versions 11.x...

Input validation

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...

Design/Logic Flaw

A vulnerability in Simple Network Management Protocol SNMP trap generation for wireless clients of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause an affected device to unexpectedly reload, resulting in a denial of...

CVE-2022-20684

CVE-2022-20684 affects Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family. The issue is an input validation defect in SNMP trap generation for events related to wireless client connections, which can be triggered by an unauthenticated, adjacent attacker sending crafted 802.1X ...

CVE-2022-20684: Integer Overflow or Wraparound

A vulnerability in Simple Network Management Protocol SNMP trap generation for wireless clients of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause an affected device to unexpectedly reload, resulting in a denial of...

CVE-2022-20682: Unchecked Return Value to NULL Pointer Dereference

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...

TP-LINK Omada Controller Software 安全漏洞

TP-Link Omada Controller Software is a set of software from Tp-link that supports the management of wireless access points.TP-Link Omada Controller Software versions prior to 5.0.15 are vulnerable to authorization issues, which stem from a lack of authentication measures or insufficient...

The vulnerability of the microprogrammed logic controller ioLogik’s software, related to hard-coding passwords, allows a intruder to escalate their privileges and execute arbitrary code.

The vulnerability of the microprogrammed logic controller ioLogik software relates to the rigid encoding of passwords. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code remotely...

The vulnerability of the microprogrammed logical controller ioLogik software, related to insufficient requirements for password complexity, allows a hacker to gain access to the user account.

The vulnerability of the microprogrammed logic controller ioLogik software is related to insufficient requirements for the complexity of passwords. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the user account...

PT-2021-7111

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family affected versions not specified Cisco Catalyst 9800 and 9800-CL for Cloud affected versions not specified Description The issue is related to inadequate input validation of...

PT-2021-7241

Name of the Vulnerable Software and Affected Versions Cisco AppDynamics Controller Software affected versions not specified Description A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a...

The vulnerability of the FATEK WinProladder controller programming software lies in an unexpected expansion of the symbol, allowing a hacker to execute arbitrary code.

The vulnerability of the FATEK WinProladder controller programming software is related to an unexpected expansion of the signature. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by having the user open a specially created malicious file...

CVE-2021-34767

Cisco IOS XE Wireless Controller Software for Catalyst 9800 Series (and related Catalyst 9000 family) is affected by CVE-2021-34767. The issue is a logic error in IPv6 traffic processing that can be exploited by an unauthenticated, adjacent attacker to send crafted link-local IPv6 packets, causin...

CVE-2021-34767: Always-Incorrect Control Flow Implementation

A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 L2 loop in a configured VLAN, resulting in a denial of service DoS condition for that...

CVE-2021-1611: Undefined Security Weakness

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

PT-2021-5174

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Wireless Controller Software versions affected versions not specified Description A vulnerability in Ethernet over GRE EoGRE packet processing could allow an unauthenticated, remote attacker to cause a denial of service DoS...

PT-2021-4846

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers affected versions not specified Description A logic error in the processing of specific link-local IPv6 traffic could allow an unauthenticated,...

CVE-2021-26996

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks...