CVE-2022-40305

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form...

Server side request forgery (ssrf)

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form...

CVE-2022-40305

CVE-2022-40305 affects Canto Cumulus up to version 11.1.3. The issue is a Server-Side Request Forgery (SSRF) via the server parameter in the /cwc/login form, enabling internal network enumeration and potential resource overload. Exploitation details are not provided in the connected documents. Re...

CVE-2022-40305

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form...

PT-2022-25338 · Canto · Canto Cumulus

Name of the Vulnerable Software and Affected Versions: Canto Cumulus versions through 11.1.3 Description: A Server-Side Request Forgery issue allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the...

Canto Cumulus 代码问题漏洞

Canto Cumulus is a digital asset management software from Canto designed for client/server systems. A code issue vulnerability exists in versions of Canto Cumulus prior to 11.1.3, which stems from a vulnerability that allows an attacker to spoof a server-side request to enumerate the internal...

SQL Injection Vulnerability in Cumulus Reports

Cumulus Reports is a free enterprise-grade WEB reporting tool. Cumulus Reports suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

The vulnerability of the Switch Configuration Tools Backend component (clcmd_server) of the Cumulus Linux operating system allows a hacker to execute arbitrary commands.

The vulnerability of the Switch Configuration Tools Backend component clcmdserver in the Cumulus Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary commands using metashell shells, utilizing the “cl-rctl”...

Cumulus Linux Switch Configuration Tools Backend (clcmd_server) Security Vulnerability

Cumulus Linux is an open network operating system from Cumulus Networks, Inc. Switch Configuration Tools Backend clcmdserver is one of the backend gateway configuration tools. A security vulnerability exists in Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier...

Cumulus Linux FRRouting bgpd Information Disclosure Vulnerability

Cumulus Linux is an open network operating system from Cumulus Networks, Inc. FRRouting FRR is one of the suite of IP routing protocols for Linux and Unix platforms. bgpd is one of the border gateway protocols. A security vulnerability in bgpd in versions of FRR prior to 2.0.2 and 3.x prior to...

Design/Logic Flaw

bgpd in FRRouting FRR before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes...

CVE-2017-15865

bgpd in FRRouting FRR before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes...

CVE-2017-15865

CVE-2017-15865 affects FRR (bgpd) in FRRouting before 2.0.2 and in 3.x before 3.0.2, used in Cumulus Linux before 3.4.3. A malformed BGP UPDATE from a connected peer can trigger transmission of up to thousands of unintended bytes, causing information disclosure. The issue stems from mishandled at...

CVE-2017-15865

bgpd in FRRouting FRR before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes...

CVE-2017-15865

bgpd in FRRouting FRR before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes...

PT-2017-14247 · Cumulus +2 · Cumulus Linux +2

Name of the Vulnerable Software and Affected Versions: FRRouting FRR versions 2.0.2 and earlier, 3.x before 3.0.2 FRRouting FRR in Cumulus Linux before 3.4.3 Description: The issue allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer. Thi...

Command injection

The Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label...

CVE-2015-5699

The Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label...

CVE-2015-5699

The Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label...

CVE-2015-5699

The CVE-2015-5699 entry concerns Cumulus Linux 2.5.3 and earlier, where the Switch Configuration Tools Backend (clcmd_server) is vulnerable to local command injection. The vulnerability arises because clcmd_server executes shell commands appended to the end of a cl-rctl command label if the label...