PT-2022-5299 · Cisco · Cisco Ata 190 Series Adaptive Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Adaptive Telephone Adapter affected versions not specified Description: The issue exists due to insufficient input validation in the Cisco Discovery Protocol implementation of the Cisco Analog Telephone Adapter ATA series...

PT-2022-6065 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: The issue is related to the Link Layer Discovery Protocol LLDP functionality and Cisco Discovery Protocol implementation in the firmware of Cisco Analo...

PT-2022-5300 · Cisco · Cisco Ata 190 Series Adaptive Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Adaptive Telephone Adapter firmware affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol functionality could allow an unauthenticated, remote attacker to cause a Denial of Service D...

Cisco ATA 190 资源管理错误漏洞

The Cisco ATA 190 is an analog telephone adapter from Cisco. The Cisco ATA 190 Series has a resource management error vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to...

PT-2022-6066 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol functionality could allow an unauthenticated, remote attacker to execute arbitrary code on an affected...

Cisco ATA 190 代码注入漏洞

The Cisco ATA 190 is an analog phone adapter from Cisco. The Cisco ATA 190 Series has a code injection vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute code, caus...

PT-2022-6175 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: The issue is related to the implementation of the Cisco Discovery Protocol in the firmware of Cisco Analog Telephone Adapter ATA series 190 devices. It...

Cisco ATA 190 输入验证错误漏洞

The ATA 190, ATA 191, and ATA 192 is a Cisco ATA 190 series analog phone adapter. An input validation error vulnerability exists in the Cisco ATA 190 local deployment only, ATA 191 local deployment or multi-platform deployment, and ATA 192 multi-platform deployment only, which stems from a securi...

The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure

The vulnerability of the Junos operating system is related to a memory leak in the control protocol daemon l2cpd. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially crafted LLDP packet...

Cisco IOS XR Software Discovery Protocol DoS (cisco-sa-xr-cdp-wnALzvT2)

A vulnerability Cisco IOS XR can allow an unauthenticated, network-adjacent attacker to cause a denial of service DoS condition on an affected device. If the Cisco Discovery Protocol CDP is in use, an attacker can cause a heap buffer overflow resulting in a restart of the CDP process. Please see...

Cisco IOS XR Software Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the Cisco Discovery Protocol process to reload on an affected device. This vulnerability is due to a heap buffer overflow in certain Cisco Discovery...

PT-2022-5096 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol implementation could allow an unauthenticated, adjacent attacker to cause the Cisco Discovery Protocol process to reload on an...

Cisco FXOS Software Cisco Discovery Protocol DoS Arbitrary Code Execution (cisco-sa-nxos-cdp-dos-ce-wWvPucC9)

According to its self-reported version, Cisco FXOS System Software is affected by a vulnerability due to improper input validation of specific values that are within a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol...

CVE-2022-23687

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23686

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

SUSE-SU-2022:2948-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-0204: Fixed a buffer overflow in the implementation of the gatt protocol bsc1194704. - CVE-2019-8922: Fixed a buffer overflow in the implementation of the Service Discovery Protocol bsc1193227...

Cisco NX-OS Software Cisco Discovery Protocol DoS Arbitrary Code Execution (cisco-sa-nxos-cdp-dos-ce-wWvPucC9)

According to its self-reported version, Cisco NX-OS System Software with Cisco Discovery Protocol enabled is affected by a vulnerability due to improper input validation of specific values that are within a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending ...

Input validation

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. This vulnerability is due to...

CVE-2022-20824 Cisco FXOS and NX-OS Software Cisco Discovery Protocol Denial of Service and Arbitrary Code Execution Vulnerability

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. This vulnerability is due to...

CVE-2022-20824

Summary: CVE-2022-20824 affects Cisco FXOS and Cisco NX-OS Software with Cisco Discovery Protocol enabled. The issue stems from improper input validation of values within a Cisco Discovery Protocol message, which can let an unauthenticated, adjacent attacker execute arbitrary code with root privi...