EUVD-2014-2143

Malware in sbrugna...

CVE-2020-28044

An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite files with MAINAPP permissions...

Code injection

An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite files with MAINAPP permissions...

CVE-2020-28044

The CVE-2020-28044 entry applies to a PAX Point Of Sale device running ProlinOS up to 2.4.161.8859R. With physical access, an attacker can boot the device into management mode, enable the XCB service, and gain MAINAPP-privileged access to list, read, create, and overwrite files. The description d...

Cisco IPS DoS

The vulnerability in the implementation of the access list management mechanism in the Cisco IPS intrusion prevention system allows malicious actors operating remotely to cause a service failure a malfunction in the MainApp process by sending specially crafted packets to port 7000...

Cisco Intrusion Prevention System MainApp SSL/TLS DoS (cisco-sa-20150311-ips)

According to its self-reported version, the Cisco Intrusion Prevention System software running on the remote host is affected by a denial of service vulnerability within the SSL/TLS subsystem due to a race condition when handling multiple HTTPS requests on the management interface. A remote...

CVE-2015-0654: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...

PT-2014-5291

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS versions 7.08E4 and earlier Cisco Intrusion Detection System IDS affected versions not specified Description The issue is related to the authentication-manager process in the web framework, which does not...

CVE-2014-3402: Improper Authentication

The authentication-manager process in the web framework in Cisco Intrusion Prevention System IPS 7.08E4 and earlier in Cisco Intrusion Detection System IDS does not properly manage user tokens, which allows remote attackers to cause a denial of service temporary MainApp hang via a crafted...

Cisco Intrusion Prevention System MainApp Denial of Service Vulnerability

A vulnerability in the web framework of Cisco Intrusion Prevention System IPS Software could allow an authenticated, remote attacker to cause MainApp to hang intermittently because the authentication manager process creates a denial of service DoS condition. The vulnerability is due to improper...

Cisco IPS MainApp SNMP Denial of Service Vulnerability

A vulnerability in the SNMP code of Cisco Intrusion Prevention System IPS Software could allow an unauthenticated, remote attacker to cause the MainApp process to become unresponsive. This creates a denial of service DoS condition because the Cisco IPS sensor is not able to execute several critic...

Cisco Intrusion Prevention System SNMP报文拒绝服务漏洞

Bugtraq ID:65864 CVE ID:CVE-2014-2103 Cisco Intrusion Prevention System IPS是一款内联的报文检测分析功能，可用于检查大量的网络攻击。 Cisco Intrusion Prevention System IPS不正确处理SNMP报文信息，允许远程攻击者利用漏洞提交特制的SNMP报文，可使MainApp应用程序停止响应，造成拒绝服务攻击。 0 Cisco Intrusion Prevention System IPS 目前没有详细解决方案提供：...

CVE-2014-2103

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

PT-2014-4485

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a MainApp process outage, by sending malformed SNMP packets. Recommendation...

CVE-2014-2103: Improper Input Validation

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

Multiple Vulnerabilities in Cisco Intrusion Prevention System Software (cisco-sa-20140219-ips)

According to its self-reported version, the version of the Cisco Intrusion Prevention System software running on the remote is affected by the following denial of service vulnerabilities : - The Analysis Engine can become unresponsive due to improper handling of fragmented packets processed throu...

Hardcoded credentials

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

CVE-2014-0719

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

PT-2014-1327

Name of the Vulnerable Software and Affected Versions Cisco IPS Software versions prior to 7.18p2E4 Cisco IPS Software versions prior to 7.22E4 Description The issue is related to the control-plane access-list implementation, allowing remote attackers to cause a denial of service by sending craft...

CVE-2014-0719: Undefined Security Weakness

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...