EUVD-2017-15668

Malware in sbrugna...

Cisco Small Business Router Privilege Escalation

The vulnerability of the microprogramming software for Cisco Small Business routers of the 250, 350, 350X, 550X series, as well as the Cisco FindIT Network Probe software for configuring and controlling wired and wireless networks, is related to the presence of a hard-coded pair of open/closed ke...

PT-2019-3517

Name of the Vulnerable Software and Affected Versions Cisco Small Business series 250, 350, 350X, 550X affected versions not specified Cisco FindIT Network Probe affected versions not specified Description The issue is related to a hardcoded X.509 certificate public/private key pair in the softwa...

Design/Logic Flaw

A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...

PT-2019-2788

Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Management versions 1.1.4 Cisco FindIT Network Probe versions 1.1.4 Description The issue is related to the use of pre-installed credentials in virtual machine images. An attacker could exploit this to gain elevated...

Design/Logic Flaw

A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...

CVE-2017-6614

A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...

CVE-2017-6614

A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...

CVE-2017-6614: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...

PT-2017-17185

Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Probe Software version 1.0.0 Description The issue is related to the file-download feature of the web user interface, where the absence of role-based access control RBAC for file-download requests allows an authenticated,...

Cisco FindIT Network Probe Information Disclosure Vulnerability

A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access control RB...