Lucene search
+L

734 matches found

CNVD
CNVD
added 2020/06/17 12:0 a.m.9 views

Unspecified Vulnerability in Treck TCP/IP DHCP Component

Treck TCP/IP is a TCP Transmission Control Protocol/IP Internet Interconnection Protocol suite dedicated to embedded systems from Treck, Inc. Treck DHCP stack is a DHCP Dynamic Host Setup Protocol implementation for embedded systems from Treck, Inc. A security vulnerability exists in the Treck...

4.3CVSS6.7AI score0.01899EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/15 2:15 p.m.3 views

CVE-2020-0596

Improper input validation in DHCPv6 subsystem in IntelR AMT and IntelR ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access...

7.5CVSS7.2AI score0.02213EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
added 2020/06/09 7:0 a.m.118 views

April 14, 2020—KB4549951 (OS Builds 18362.778 and 18363.778) - EXPIRED

None None...

9.3CVSS6.8AI score0.65037EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.11 views

The vulnerability of the DHCP module of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software allows a attacker to induce a service failure.

The vulnerability of the DHCP module of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software-related microprogramming systems is related to errors in processing certain DHCP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.8CVSS6.7AI score0.01233EPSS
SaveExploits0References3Affected Software2
CNVD
CNVD
added 2020/05/21 12:0 a.m.4 views

Cisco Prime Network Registrar Input Validation Error Vulnerability

Cisco Prime Network Registrar CPNR is a network registrar product from the U.S. company Cisco Cisco. The product provides services such as Dynamic Host Configuration Protocol DHCP, Domain Name System DNS and IP Address Management IPAM. An input validation error vulnerability exists in Cisco Prime...

7.8CVSS6.6AI score0.0151EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/06 5:15 p.m.8 views

CVE-2020-3306

A vulnerability in the DHCP module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to incorrect processing ...

7.5CVSS6.8AI score0.01233EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/05/06 12:0 a.m.7 views

PT-2020-2515 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the DHCP module could allow an unauthenticated, remote...

7.8CVSS6.7AI score0.01233EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.10 views

The vulnerability of the IPv4 protocol in real-time operating systems like Wind River VxWorks allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the IPv4 protocol for real-time operating systems developed by Wind River VxWorks is related to insufficient access control mechanisms, such as ipdhcpc and DHCP. Exploiting this vulnerability could allow attackers to compromise the integrity and accessibility of protected...

5.4CVSS7.2AI score0.08311EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/03/27 12:0 a.m.10 views

The vulnerability of the DHCP protocol for real-time operating systems like Wind River VxWorks allows a perpetrator to execute arbitrary code.

The vulnerability of the DHCP protocol for real-time operating systems like Wind River VxWorks is related to a potential overflow during the parsing of DHCP/DACK messages within the ipdhcpc process. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted...

8.8CVSS8.5AI score0.84177EPSS
SaveExploits0References7Affected Software4
Tenable Nessus
Tenable Nessus
added 2020/02/24 12:0 a.m.36 views

Junos OS Multiple vulnerabilities (JSA10981)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities: - When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable...

8.8CVSS8.5AI score0.00937EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.12 views

The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon (JDHCPD) in the operating system allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the Junos Dynamic Host Configuration Protocol Daemon JDHCPD operating system exists due to the lack of measures taken to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands wi...

8.8CVSS7.9AI score0.00836EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2020/02/07 12:0 a.m.11 views

openSUSE wicked denial of service vulnerability

openSUSE is an operating system based on the linux kernel. A denial of service vulnerability exists in openSUSE, which can be exploited by an attacker to cause a denial of service by sending specially crafted DHCP4 packets...

7.5CVSS6.8AI score0.01099EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/02/05 3:15 p.m.5 views

CVE-2020-7216

An nidhcp4parseresponse memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option...

7.5CVSS7.2AI score0.01099EPSS
SaveExploits0References3
OSV
OSV
added 2020/01/15 9:15 a.m.7 views

CVE-2020-1602

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may remotely take over the code execution of the JDHDCP process. This iss...

8.8CVSS7.7AI score0.00787EPSS
SaveExploits0References2
OSV
OSV
added 2020/01/15 9:15 a.m.10 views

CVE-2020-1609

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

8.8CVSS7.4AI score0.00937EPSS
SaveExploits0References2
Prion
Prion
added 2020/01/15 9:15 a.m.27 views

Design/Logic Flaw

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

8.3CVSS8.6AI score0.00937EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/01/15 8:40 a.m.70 views

CVE-2020-1602

CVE-2020-1602 affects Juniper Networks Junos OS and Junos OS Evolved where JDHCPD (IPv4 relay mode) can be remotely exploited by crafted IPv4 packets to take over the JDHCPD process. Affected products include Junos OS releases listed as prior to the specified versions (e.g., 15.1, 15.1R7-S6; 16.1...

8.8CVSS7.9AI score0.00787EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/01/15 12:0 a.m.11 views

Juniper Networks Junos OS JDHCPD Command Injection Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability in Juniper Networks Junos OS Dynamic Host Configuration Protocol Daemon JDHCPD can be exploited by a remote attacker to submit a special IPv6 request that can be...

8.8CVSS7.7AI score0.00937EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/01/15 12:0 a.m.6 views

Juniper Networks Junos OS JDHCPD IPv4 Command Injection Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability in Juniper Networks Junos OS Dynamic Host Configuration Protocol Daemon JDHCPD can be exploited by a remote attacker to submit a special IPv4 request that can be...

8.8CVSS7.7AI score0.00836EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:0 a.m.9 views

The vulnerability of Mentor’s Nucleus operating system, related to insufficient checking of DHCP packets, allows attackers to compromise the accessibility and integrity of the protected information.

The vulnerability of Mentor’s Nucleus operating system lies in insufficient testing of DHCP packets. Exploiting this vulnerability allows a remote attacker to compromise the accessibility and integrity of the protected information...

7.1CVSS7.1AI score0.00715EPSS
SaveExploits0References2
Rows per page
Query Builder