How do I Customize Unified Gateway Portal?

Use Case Portal is the first interaction point for end users and hence important to have correct representation of an organization. Customize the look and feel, color, logo and labels on the Gateway portal to brand the portal as per organizational standards. Introduction to Portal Customization...

Cisco Warning of CSRF, XSS Vulnerabilities

UPDATE Cisco is warning users this week that several of its products — routers, gateways, and data center platforms — suffer from vulnerabilities, including one critical one. Cisco warned about the most pressing issue, a critical vulnerability in its Prime Collaboration Assurance software, shortl...

CVE-2015-8084

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service reboot via crafted DHC...

CVE-2015-8084

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service reboot via crafted DHC...

CVE-2015-8083

An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not properly initialize memory when processing timeout messages, which allows remote attackers to cause a denial of service out-of-bounds memory access...

CVE-2015-7845

The CVE-2015-7845 in Huawei eSpace U1910/U1911/U1930/U1960/U1980/U1981 (pre‑V100R001C20SPH605) is caused by a flaw in the CLI Module’s exception handling that lets remote attackers trigger a denial of service (CLI outage) by sending specially crafted SSH packets. Affected devices are Huawei eSpac...

IBM DataPower Gateways GatewayScript Module Information Disclosure Vulnerability

IBM DataPower Gateways is a suite of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interfaces APIs, web, service-oriented architecture SOA, B2B, and cloud workloads, which protects, integrates, and optimizes access across channels...

Shopify: An administrator without the 'Settings' permission is able to see payment gateways

Description ==== An administrator who lacks the 'Settings' permission is not able to see the shops payment gateways through the UI. But the endpoint shop.myshopify.com/admin/paymentgateways.json does disclose payment gateways to the unprivileged user. Mitigation ==== Restrict the endpoint in...

knx-gateway-discover NSE Script

Discovers KNX gateways by sending a KNX Search Request to the multicast address 224.0.23.12 including a UDP payload with destination port 3671. KNX gateways will respond with a KNX Search Response including various information about the gateway, such as KNX address and supported services. Further...

Advantech EKI Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-344-01A Advantech EKI Vulnerabilities that was published December 15, 2015, on the NCCIC/ICS-CERT web site. --------- Begin Update B Part 1 of 3 -------- HD Moore of Rapid7 identified several vulnerabilities in...

The vulnerability of the microprogramming software of Sierra Wireless’ wireless gateways—AirLink GX450, AirLink ES440, AirLink GX440, and AirLink LS300—allows a hacker to gain access to the device with administrator privileges.

The vulnerability of the microprogramming software in Sierra Wireless’ wireless gateways—AirLink GX450, AirLink ES440, AirLink GX440, and AirLink LS300—is related to the presence of a pre-installed user with administrator privileges. Exploiting this vulnerability allows a malicious actor to gain...

Advantech EKI Hard-coded SSH Keys Vulnerability

OVERVIEW Independent researcher Neil Smith has identified a hard-coded SSH key vulnerability in Advantech’s EKI-122X series products. Advantech has produced new firmware to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Advantech reports that the...

CVE-2015-5363

CVE-2015-5363 affects Juniper Networks Junos SRX Series, specifically the SRX Network Security Daemon (nsd). The vulnerability allows a remote DNS server to trigger a denial of service (crash) in nsd by sending a crafted DNS response. Affected releases include Junos 12.1X44 before 12.1X44-D50, 12...

ANTlabs InnGate Firmware SQL Injection Vulnerability

ANTlabs InnGate firmware on IG 3100 etc. is a firmware from ANTlabs Singapore for use in IG 3100 gateways and other devices. A SQL injection vulnerability exists in the main.ant file in the ANTlabs InnGate firmware on multiple ANTlabs devices. A remote attacker could execute arbitrary queries on...

The vulnerability of Cisco ASA network gateways, which allows attackers to trigger a service failure

The vulnerability of the PIM network interface card in Cisco ASA applications is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by generating specific broadcast requests...

Authorization Bypass Vulnerability in RG-NBR Series Gateways of Riptide Networks

Ruijie Networks, is a leading brand of network solutions in China. As a national enterprise, Ruijie Networks adheres to the road of independent research and development, and opens up a unique avenue of innovation in the highly competitive network equipment market. The vendors represented by Ruiji...

WordPress Payment Gateways Caller Plugin <= 0.1.0 - Local file Inclusion

This plugin is prone to a loadmerchant parameter traversal local file inclusion vulnerability. Solution Update the plugin...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The numerous vulnerabilities in the ldap-gateways package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

There are multiple vulnerabilities in the openldap-gateways package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

AntLabs InnGate security vulnerability patch

ANTLabs today is expected to roll out patches for a vulnerability in its InnGate Internet gateways that are popular in hospitality and convention locations. The gateways provide temporary Internet access to hotel guests or conference attendees using kiosks, for example. The vulnerability...