827 matches found
July 11, 2023—KB5028232 (Monthly Rollup)
None None...
CISA Releases Four Industrial Control Systems Advisories
CISA released four Industrial Control Systems ICS advisories on June 22, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-173-02 Advantech R-SeeNet ICSA-23-173-03 SpiderControl SCADAWebServer ICSA-23-026-02...
CVE-2023-24510
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...
CVE-2023-24510
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...
Code injection
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...
CVE-2023-24510
CVE-2023-24510 affects Arista EOS on multiple platforms. A malformed DHCP packet can cause the DHCP relay agent to restart, leading to partial denial of service of the DHCP relay service. The issue is present in EOS trains listed by Arista’s advisory and is triggered when two or more DHCP server ...
CVE-2023-24510 On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...
CVE-2023-24510 On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...
CVE-2023-24510
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...
Security Advisory 0087
Security Advisory 0087 . CSAF PDF Date: May 31, 2023 Revision | Date | Changes ---|---|--- 1.0 | May 31, 2023 | Initial release 1.1 | September 24, 2024 | Update fixed release info The CVE-ID tracking this issue: CVE-2023-24510 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...
CVE-2023-2851
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection. This issue affects all versions of the sofware also EOS when CVE-ID assigned...
CVE-2023-2851 SQLi in Ceppatron
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection. This issue affects all versions of the sofware also EOS when CVE-ID assigned...
CVE-2023-2851
CVE-2023-2851 describes an SQL Injection vulnerability in AGT Tech Ceppatron (cash register device) that allows command line execution through SQL injection. According to the sources, it affects all versions of the software; the root cause is improper neutralization of special elements used in SQ...
May 9, 2023—KB5026415 (Monthly Rollup)
None None...
May 9, 2023—KB5026409 (Security-only update)
None None...
CVE-2023-24512
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...
CVE-2023-24512
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...
Design/Logic Flaw
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...
CVE-2023-24512 On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch.
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...
CVE-2023-24512 On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch.
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...