The vulnerability of the FTP intrusion detection module of Cisco Firepower Threat Defense (FTD) allows a hacker to bypass existing security restrictions.

The vulnerability of the FTP intrusion detection module of Cisco Firepower Threat Defense FTD is related to insufficient detection or processing of adverse input disturbances. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Zyxel ATP Security Vulnerability

The Zyxel ATP is a firewall from China's Heqin Zyxel. A security vulnerability exists in Zyxel ATP firmware versions 4.32 through 5.37 Patch 1, which originates from a vulnerability that could allow an authenticated attacker to execute certain operating system commands on the affected device via...

PT-2024-20096 · Siemens · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 SP1 Description: A vulnerability has been identified in the affected application, allowing users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other...

CVE-2023-40263

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated command injection via ftp...

Atos Unify OpenScape Command Injection Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A command injection vulnerability exists in Atos Unify OpenScape Voice Trace Manager V8 V8 prior to R0.9.11, which originates from allowing authenticated command injection via ftp...

curl: FTP too eager connection reuse

A flaw was found in the Curl package. Libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, several FTP settings were left out from the configuration match checks, making them match too easily. The problematic...

PT-2024-15894 · Kmint21 · Kmint21 Golden Ftp Server

Name of the Vulnerable Software and Affected Versions: Kmint21 Golden FTP Server version 2.02b Description: A vulnerability was found in the PASV Command Handler component, which can lead to denial of service when manipulated. The attack can be initiated remotely. Recommendations: For Kmint21...

The vulnerability of the TFTP Server component of the Korenix microprogramming software for switches allows a hacker to circumvent existing security restrictions.

The vulnerability of the TFTP Server component of the Korenix microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...

EFS Easy File Sharing FTP Security Vulnerability

EFS Software EFS Easy File Sharing FTP is an easy-to-use and powerful FTP Server software from EFS Software. A security vulnerability exists in EFS Easy File Sharing FTP version 3.6, which stems from a denial of service caused by the password parameter of the component Login...

PT-2024-15754 · Unknown · Efs Easy File Sharing Ftp

Name of the Vulnerable Software and Affected Versions: EFS Easy File Sharing FTP version 2.0 Description: A problematic vulnerability was found in the software, affecting an unknown functionality. The manipulation of the username argument leads to denial of service. The attack can be launched...

FreeFloat FTP Server Security Vulnerability

FreeFloat FTP Server is an FTP service. A security vulnerability exists in FreeFloat FTP Server version 1.0 that stems from a denial of service DOS vulnerability in the SIZE Command Handler component...

Korenix JetNet Security Vulnerability

Korenix JetNet is an industrial 5-port 10 / 100Base-TX Ethernet switch from Korenix. A security vulnerability exists in Korenix JetNet firmware versions prior to 2024/01, which stems from incorrect authentication in TFTP, allowing users to upload and download files to the /home folder...

PT-2023-28194 · Unknown · Hmi Gc-A2 Series

Name of the Vulnerable Software and Affected Versions: HMI GC-A2 series affected versions not specified Description: A denial-of-service DoS issue exists in the FTP service, allowing a remote unauthenticated attacker to cause a DoS condition by sending specially crafted packets to specific ports...

Multiple denial-of-service (DoS) vulnerabilities in JTEKT ELECTRONICS HMI GC-A2 series

Overview HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contains multiple denial-of-service DoS vulnerabilities listed below. Denial-of-service DoS vulnerability in FTP service CWE-400 - CVE-2023-41963 Denial-of-service DoS vulnerability in commplex-link service CWE-400 - CVE-2023-491...

CVE-2023-48692 Azure RTOS NetX Duo Remote Code Execution Vulnerability

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to icmp,...

CVE-2023-48315 Azure RTOS NetX Duo Remote Code Execution Vulnerability

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to ftp and...

apache-mina-sshd: information exposure in SFTP server implementations

A flaw was found in Apache Mina SSHD that could be exploited on certain SFTP servers implemented using the Apache Mina RootedFileSystem. This issue could permit authenticated users to view information outside of their permissions scope...

apache-mina-sshd: information exposure in SFTP server implementations

A flaw was found in Apache Mina SSHD that could be exploited on certain SFTP servers implemented using the Apache Mina RootedFileSystem. This issue could permit authenticated users to view information outside of their permissions scope...

PT-2023-30777 · Microsoft · Azure Rtos Netx Duo

Name of the Vulnerable Software and Affected Versions: Azure RTOS NetX Duo versions prior to 6.3.0 Description: The issue affects Azure RTOS NetX Duo, a TCP/IP network stack for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow...

The vulnerability of the TFTP protocol implementation in ASUS RT-AC87U router microsoftware allows a hacker to gain access to read, modify, or delete files.

The vulnerability of the TFTP protocol implementation in ASUS RT-AC87U router microsoftware is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete file access rights remotely...