UBUNTU-CVE-2019-25076

The TSS Tuple Space Search algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service delays of legitimate traffic via crafted packet data that requires excessive evaluation time within the packet classification algorithm for the MegaFlow cache, ak...

PT-2022-23145 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.8 Description: The low-power IPv6 network stack of Contiki-NG has a buffer module that processes IPv6 extension headers in incoming data packets. The function uipbuf get next header casts a pointer to a uip ext...

DEBIAN-CVE-2022-0934

A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially causing a denial of service...

The vulnerabilities of EtherNet/IP adaptation programs (EADK), EtherNet/IP scanners (EDKS), and EtherNet/IP DLL adapters (EIPA) / EtherNet/IP DLL scanners (EIPS) stem from writing beyond the buffer boundaries in memory, allowing attackers to trigger service failures.

The vulnerabilities of EtherNet/IP adaptation programs EADK, EtherNet/IP scanners EDKS, and EtherNet/IP DLL adapters EIPA are related to writing beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to cause service failure by sending specially craft...

CVE-2022-36522

Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools/nova/bin/netwatch. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

PT-2022-23443 · Mikrotik · Routeros +1

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions through 6.48.3 Description: The issue is related to an assertion failure in the component /advanced-tools/nova/bin/netwatch, allowing attackers to cause a Denial of Service DoS via a crafted packet. Recommendations:...

The vulnerability of TP-Link TL-R473G router’s microprogramming software lies in the fact that the operation is performed outside the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of TP-Link TL-R473G router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted packets...

CVE-2022-33939

CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service DoS condition in ADL communication by sending a...

CVE-2022-33939

CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service DoS condition in ADL communication by sending a...

Juniper Junos OS Vulnerability (JSA11188)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11188 advisory. - A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved EVO allows an attacker to send specially crafted packets to the device,...

CVE-2022-27660

A denial of service vulnerability exists in the confctlsetguestwlan functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability...

CVE-2022-26346

A denial of service vulnerability exists in the uclouddelnode functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability...

CVE-2022-27633

An information disclosure vulnerability exists in the confctlgetguestwlan functionality of TCL LinkHub Mesh Wifi MS1G0001.0014. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability...

CVE-2022-27630

An information disclosure vulnerability exists in the confctlgetmasterwlan functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability...

DEBIAN-CVE-2022-37035

An issue was discovered in bgpd in FRRouting FRR 8.3. In bgpnotifysendwithdata and bgpprocesspacket in bgppacket.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is no...

The vulnerability of microprogrammed software in Siemens SIMATIC S7-400 and SIMATIC S7-410 programmable logic controllers arises from the possibility of an operation outputting data beyond the buffer boundaries in memory. This vulnerability allows a malicious entity to cause malfunctions during maintenance operations.

The vulnerability of microprogrammed software in Siemens SIMATIC S7-400 and SIMATIC S7-410 programmable logic controllers is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause malfunctions by sending special...

PT-2022-4283 · Frrouting +4 · Frrouting +4

Name of the Vulnerable Software and Affected Versions: FRRouting FRR version 8.3 Description: A possible use-after-free due to a race condition was discovered in the bgpd component of FRRouting. This issue affects the bgp notify send with data and bgp process packet functions in bgp packet.c. It...

TCL LinkHub Mesh Wi-Fi 缓冲区错误漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi that stems from a stack-based buffer overflow vulnerability in the confsrv addTimeGroup function of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially crafted network packet could...

TP-LINK TL-R473G Remote Code Execution Vulnerability

The TP-LINK TL-R473G is a Gigabit Enterprise VPN Router from China P&L TP-LINK. A security vulnerability exists in TP-LINK TL-R473G version 2.0.1 Build 220529 Rel.65574n. An attacker exploits the vulnerability to execute remote code via specially crafted packets...

PT-2022-3911 · Yokogawa · Centum Vp +4

Name of the Vulnerable Software and Affected Versions: CENTUM VP / CS 3000 controller FCS CP31, CP33, CP345, CP401, and CP451 CENTUM CS 3000 CENTUM CS 3000 Entry Class CENTUM VP CENTUM VP Entry Class Description: The issue is related to errors in resource management, which may lead to resource...