CVE-2022-37980

Technical details about CVE-2022-37980 (affected software, root cause, impact, and fix) are not publicly disclosed in the provided documents. Monitor official sources for updates.

CVE-2022-40869

Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list" "%s%d","list"...

CVE-2021-34591

In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid applications socat, ip udhcpc and ifplugd...

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

NetworkManager bug fix and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

EulerOS 2.0 SP3 : systemd (EulerOS-SA-2022-1192)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the...

Siemens Nucleus RTOS-based APOGEE and TALON Products Improper Null Termination (CVE-2021-31884)

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

Siemens Heap-Based Buffer Overflow in Wind River VxWorks (CVE-2019-12257)

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

SUSE SLED15 / SLES15 Security Update : busybox (SUSE-SU-2022:0135-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0135-1 advisory. - CVE-2011-5325: Fixed tar directory traversal bsc951562. - CVE-2015-9261: Fixed segfalts and application...

EulerOS Virtualization 2.9.0 : systemd (EulerOS-SA-2021-2778)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a...

Multiple Siemens products incorrectly zero-terminated vulnerabilities

The Nucleus NET module integrates a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. A security vulnerability exists in several Siemens products, which stems from the DHCP client...

Design/Logic Flaw

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

CVE-2021-31883

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303. When processing a DHCP ACK message, the DHCP client application does not validate the length of the Vendor options, leading to Denial-of-Service...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2021-2578)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : dhcp (EulerOS-SA-2021-2267)

According to the version of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in th...

Siemens RUGGEDCOM ROS Devices Buffer Overflow Vulnerability

Siemens RuggedCom ROS is a Siemens operating system for the RuggedCom series of switches. A buffer overflow vulnerability exists in Siemens RUGGEDCOM ROS Devices due to a DHCP client in the affected devices failing to properly clear incoming DHCP packets. A remote attacker could exploit the...

Remote code execution

A vulnerability has been identified in RUGGEDCOM ROS M2100 All versions V4.3.7, RUGGEDCOM ROS M2200 All versions V4.3.7, RUGGEDCOM ROS M969 All versions V4.3.7, RUGGEDCOM ROS RMC All versions V4.3.7, RUGGEDCOM ROS RMC20 All versions V4.3.7, RUGGEDCOM ROS RMC30 All versions V4.3.7, RUGGEDCOM ROS...

CVE-2021-31895

A vulnerability has been identified in RUGGEDCOM i800 All versions V4.3.7, RUGGEDCOM i801 All versions V4.3.7, RUGGEDCOM i802 All versions V4.3.7, RUGGEDCOM i803 All versions V4.3.7, RUGGEDCOM M2100 All versions V4.3.7, RUGGEDCOM M2200 All versions V4.3.7, RUGGEDCOM M969 All versions V4.3.7,...

CVE-2021-31895

CVE-2021-31895 affects Siemens RUGGEDCOM ROS and ROS-derived devices (e.g., i800/i801/i802/i803, M2100/M2200, RMC/RMC8388/RSG series, RS/RL/RST series, etc.) across versions prior to 4.3.7 (and some 5.x lines). The underlying issue is a DHCP client that fails to properly sanitize incoming DHCP pa...

dhcp: stack-based buffer overflow when parsing statements with colon-separated hex digits in config or lease files in dhcpd and dhclient

A flaw was found in the Dynamic Host Configuration Protocol DHCP. There is a discrepancy between the code that handles encapsulated option information in leases transmitted "on the wire" and the code which reads and parses lease information after it has been written to disk storage. This flaw...