Integer Overflow Vulnerability in libmtp 'ptp_unpack_EOS_CustomFuncEx' Function

libmtp is an LGPL library for the Media Transport Protocol. An integer overflow vulnerability exists in the 'ptpunpackEOSCustomFuncEx' function of the ptp-pack.c file in libmtp versions 1.1.12 and earlier. A remote attacker could exploit this vulnerability by plugging a mobile device into a PC vi...

Arista EOS Compliance Checks

Binary data aristacompliancecheck.nbin...

Arista EOS DoS Vulnerability (Security Advisory 0025)

Arista EOS on DCS-7050 series is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Arista EOS Detection (SNMP)

SNMP based detection of Arista EOS devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

CVE-2016-6894

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

CVE-2016-6894

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

CVE-2016-6894

Arista EOS DoS CVE-2016-6894 affects DCS-7050 series: versions 4.15 prior to 4.15.8M, 4.16 prior to 4.16.7M, and 4.17 prior to 4.17.0F allow a remote attacker to reboot the device by sending crafted packets to the control plane. The root cause is a vulnerability in how control plane packets are h...

Security Advisory 0025

Security Advisory 0025 PDF Date: October 17th, 2016 Version: 1.1 Revision | Date | Changes ---|---|--- 1.0 | October 17th, 2016 | Initial Release 1.1 | October 18th, 2016 | Affected platforms section is expanded Affected Platforms:DCS-7050 series only - 7050S, 7050T, 7050Q platforms 7050X series ...

Security Advisory 0024

Security Advisory 0024 PDF Date: October 4th, 2016 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | October 4th, 2016 | Initial release Arista Products vulnerability report for security vulnerabilities announcement from the OpenSSL project on September 22nd, 2016 Product: EOS and...

Security Advisory 0023

Security Advisory 0023 PDF Date: August 15th, 2016 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | August 15th, 2016 | Initial release 1.1 | September 15th, 2016 | Updated to include fixed software versions Arista Products vulnerability report for security vulnerability CVE-2016-5696 that...

eosairlines.com XSS vulnerability

Vulnerable URL: http://eosairlines.com/bh.php?dm=homero.com.mx";;alert'OPENBUGBOUNTY';function zif0// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Security Advisory 0022

Security Advisory 0022 PDF Date: June 28th, 2016 Version: 1.1 Revision| Date| Changes ---|---|--- 1.0 | June 15th, 2016 | Initial release 1.1 | June 28th, 2016 | Updated to remove a part of the mitigation section that involved ipv6 ACLs with hop-limit. This section was removed in order to avoid a...

Security Advisory 0021

Security Advisory 0021 PDF Date: June 13th, 2016 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | June 13th, 2016 | Initial release Arista Products vulnerability report for security vulnerability announcement from NGINX on May 31st, 2016 It was announced by NGINX on May 31, 2016 that there ...

Security Advisory 0020

Security Advisory 0020 PDF Date: May 6th, 2016 Version: 1.2 Revision| Date| Changes ---|---|--- 1.0 | May 6th, 2016 | Initial release 1.1 | May 12th, 2016 | Updated to include assessment for CVX and CVP. Change in vulnerability status for CVE-2016-2107. 1.2 | May 20th, 2016 | Updated to include...

Security Advisory 0019

Security Advisory 0019 PDF Date: April 25th, 2018 Version: 1.1 Revision| Date| Changes ---|---|--- 1.0 | May 3rd, 2016 | Initial release 1.1 | April 25th, 2018 | Updated vulnerability information for CVE-2016-1549 Arista Products vulnerability report for security vulnerabilities announcement from...

Canon EOS 1200D Companion - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Canon EOS 1200D Companion published at the 'play' market has multiple vulnerabilities...

EOS Remote - Native code usage, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application EOS Remote published at the 'play' market has multiple vulnerabilities...

eosairlines.com XSS vulnerability

Vulnerable URL: http://www.eosairlines.com/?domain=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.03.2016 Latest check for patch:| 03.03.2016 02:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Security Advisory 0017

Security Advisory 0017 PDF Date: October 31st, 2017 Version: 1.6 Revision | Date | Changes ---|---|--- 1.0 | February 16th, 2016 | Initial release 1.1 | February 19th, 2016 | Updates include assessment and mitigation 1.2 | February 25th, 2016 | Updates include options for mitigation and protectio...