Huawei NIP6800, Secospace USG6600 and USG9500 IPSec Module Out-of-Bounds Read Vulnerability

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. A security vulnerability exists in the IPSec module in the Huawei NIP6800, Secospace USG6600, and USG9500. An...

CVE-2016-2356

CVE-2016-2356 affects Milesight IP security cameras (through 2016-11-14). The vulnerability is a buffer overflow in the web application triggered by a long username or password, reported consistently across NVD/Red Hat/CNVD entries. Impact details in sources indicate potential memory corruption; ...

CVE-2016-2359

CVE-2016-2359 concerns Milesight IP security cameras. The linked Red Hat/CNVD/OpenVAS entries describe an authentication bypass vulnerability that allows remote attackers to access protected resources by issuing a request for the unprotected vb.htm resource, affecting devices up to 2016-11-14. Th...

CVE-2016-2358

CVE-2016-2358 affects Milesight IP security cameras up to 2016-11-14, which ship with a default set of 10 privileged accounts using hardcoded credentials. If the customer has not configured 10 actual user accounts, these default accounts remain accessible, enabling potential unauthorized access.

CVE-2016-2360

Milesight IP security cameras (through 2016-11-14) have a default root password in /etc/shadow that is the same across different customers’ installations. Connected records corroborate this issue across multiple sources (Red Hat, CNVD, CVE databases) and describe the credential issue as a default...

CVE-2016-2356: Buffer Copy without Checking Size of Input

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...

CVE-2016-2357: Use of Hard-coded Credentials

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory...

CVE-2016-2360: Use of Hard-coded Credentials

Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' installations...

CVE-2016-2359: Improper Authentication

Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource...

PT-2019-7817

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue concerns a hardcoded SSL private key located under the /etc/config directory. Recommendations For Milesight IP security cameras versions prior to 2016-11-14,...

PT-2019-7820

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue concerns a default root password in /etc/shadow that is identical across different installations of the affected cameras. Recommendations For Milesight IP securit...

CVE-2016-2358: Use of Hard-coded Credentials

Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer has not configured 10 actual user accounts...

PT-2019-7818

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue concerns Milesight IP security cameras that have a default set of 10 privileged accounts with hardcoded credentials. These accounts are accessible if the customer...

PT-2019-7816

Name of the Vulnerable Software and Affected Versions Milesight IP security cameras versions prior to 2016-11-14 Description The issue is related to a buffer overflow in the web application of the cameras, which can be triggered by a long username or password. Recommendations For versions prior t...

The vulnerability of Junos OS router devices of the SRX Series, related to IP packet processing errors, allows attackers to cause service interruptions.

The vulnerability of the Junos OS router series lies in errors in the processing of IP packets passing through the IPsec tunnel. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

CVE-2019-0060

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service DoS condition. This issue only occurs...

CVE-2019-6650

F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensitive information and allow the system configuration to be modified when using non-default settings...

Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2019-15875)

The Cisco Firepower 2100 Series and Cisco Adaptive Security Virtual Appliance are both products of Cisco Corporation.The Firepower 2100 Series is a 2100 series firewall appliance.The Cisco Adaptive Security Virtual Appliance is a virtualized version of the Cisco ASA Adaptive Security Appliance. T...

UBUNTU-CVE-2013-7470

cipsov4validate in include/net/cipsoipv4.h in the Linux kernel before 3.11.7, when CONFIGNETLABEL is disabled, allows attackers to cause a denial of service infinite loop and crash, as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310...

CVE-2018-0472

A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to improper processing of malformed IPsec...