Lucene search
+L

390 matches found

Vulnrichment
Vulnrichment
•added 2023/06/26 7:44 p.m.•24 views

CVE-2023-2993

A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands on SMM v1, SMM v2, and FPC that the user does not normally have sufficient privileges to execute...

5.4CVSS7.1AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/26 7:44 p.m.•61 views

CVE-2023-2993

Summary of CVE-2023-2993 (Mode C) CVE-2023-2993 affects Lenovo ThinkSystem components including SMM v1, SMM v2, and FPC. The vulnerability arises from authenticated, limited-privilege users being able to craft web management server API calls that execute a limited number of commands that the user...

6.3CVSS6.4AI score0.00288EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/06/26 7:44 p.m.•41 views

CVE-2023-2992

An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server...

7.5CVSS7.7AI score0.00616EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/06/26 7:44 p.m.•21 views

CVE-2023-2992

An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server...

7.5CVSS7.2AI score0.00616EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/26 7:44 p.m.•67 views

CVE-2023-2992

CVE-2023-2992 affects the SMM v1/v2 and FPC management web server. It is described as an unauthenticated denial-of-service vulnerability that can be triggered under crafted conditions, with availability loss recoverable by rebooting the affected components. The documents do not provide specific a...

7.5CVSS7.5AI score0.00616EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/26 12:00 a.m.•5 views

CVE-2023-2992: Asymmetric Resource Consumption (Amplification)

An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server...

7.5CVSS7.2AI score0.00616EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/26 12:00 a.m.•8 views

CVE-2023-2993: Improper Preservation of Permissions

A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands on SMM v1, SMM v2, and FPC that the user does not normally have sufficient privileges to execute...

6.3CVSS6.8AI score0.00288EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/06/09 12:00 a.m.•24 views

Flexible PIC Concentrator OS Maintenance Failure

The vulnerability of the Flexible PIC Concentrator FPC module of Juniper Networks’ Junos OS is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.6AI score0.00309EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/01/13 12:15 a.m.•42 views

CVE-2023-22414

A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX...

6.5CVSS6.5AI score0.00309EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/01/13 12:15 a.m.•21 views

CVE-2023-22414

A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX...

6.5CVSS6.6AI score0.00309EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/13 12:15 a.m.•65 views

CVE-2023-22401

An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon aftmand of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. On the PTX10008 and PTX10016 platforms running Junos ...

7.5CVSS7.5AI score0.00616EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/01/13 12:15 a.m.•23 views

CVE-2023-22400

An Uncontrolled Resource Consumption vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause an FPC crash leading to a Denial of Service DoS. When a specific SNMP GET operation or a specific CLI command...

7.5CVSS7.1AI score0.00616EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/13 12:15 a.m.•33 views

Design/Logic Flaw

A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX...

3.3CVSS6.4AI score0.00309EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/01/13 12:15 a.m.•35 views

Design/Logic Flaw

An Uncontrolled Resource Consumption vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause an FPC crash leading to a Denial of Service DoS. When a specific SNMP GET operation or a specific CLI command...

5CVSS7.6AI score0.00616EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/01/13 12:15 a.m.•35 views

Input validation

An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon aftmand of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. On the PTX10008 and PTX10016 platforms running Junos ...

5CVSS7.4AI score0.00616EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2023/01/13 12:15 a.m.•39 views

Design/Logic Flaw

An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause Denial of Service DoS. On all MX platforms with MS-MPC or MS-MIC card, when specific IPv4 packets are processed by an...

5CVSS7.5AI score0.00644EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/01/13 12:00 a.m.•20 views

Juniper Networks Junos OS和Juniper Networks Junos OS PTX 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS PTX are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed specifically for the company's hardware devices. The operating system provides a secure programming interface and the Junos...

6.5CVSS6.5AI score0.00309EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/13 12:00 a.m.•23 views

Juniper Networks Junos OS 资源管理错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS Evolved, which arises from uncontrolled resourc...

7.5CVSS7.3AI score0.00616EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/12 12:00 a.m.•9 views

CVE-2023-22414: Missing Release of Memory after Effective Lifetime

A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX...

6.5CVSS5.7AI score0.00309EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/01/12 12:00 a.m.•14 views

CVE-2023-22414 Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX...

6.5CVSS6.5AI score0.00309EPSS
SaveExploits0References1
Rows per page
Query Builder