VulnCheck KEV: CVE-2017-6736

The Simple Network Management Protocol SNMP subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2019-13854)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS. An attacker could exploit this vulnerability by continuously...

The vulnerability of the message processing mechanism implemented through the Cluster Management Protocol (CMP) in Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the message processing mechanism based on the Cluster Management Protocol CMP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger service failures using speciall...

UBUNTU-CVE-2019-11025

In clearFilter in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string SNMP Options in the View poller cache, leading to XSS...

CVE-2019-6606

On BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing certain SNMP requests with a request-id of 0, the snmpd process may leak a small amount of memory...

Input validation

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

CVE-2019-1746

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

Using Semmle QL vulnerability out Part2-vulnerability warning-the black bar safety net

First part of this series introduced the Semmle QL, as well as the Microsoft Security Response Center MSRC how to use it to review to our report the vulnerability. This article discusses a How do we take the initiative to use it examples, including Azure firmware component of a security audit. Th...

Cisco IOS and IOS XE CMP Denial of Service Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the Cluster Management Protocol CMP handling code in Cisco IOS and IOS XE. An attacker could exploit this vulnerability by sending malicious CMP management...

CVE-2019-1746 Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

CVE-2019-1746

CVE-2019-1746 affects Cisco IOS and IOS XE where the CMP (Cluster Management Protocol) processing code fails input validation, enabling an unauthenticated, adjacent attacker to trigger a denial-of-service by sending crafted CMP packets. A successful exploit can crash the switch and cause an autom...

CVE-2019-1746 Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

DEBIAN-CVE-2019-9162

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nfnatsnmpbasicmain.c in the SNMP NAT module has insufficient ASN.1 length checks aka an array index error, making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmpversion and...

UBUNTU-CVE-2019-9162

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nfnatsnmpbasicmain.c in the SNMP NAT module has insufficient ASN.1 length checks aka an array index error, making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmpversion and...

The vulnerability of the _set_key function in the software for deploying and using the SNMP protocol Net-SNMP allows a attacker to cause a service failure.

The vulnerability of the setkey function in the “agent/helpers/tablecontainer.c” file of the SNMP Net-SNMP deployment and usage software is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause system failures and service interruptions through a...

Rockwell Automation EtherNet/IP Web Server Modules

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: EtherNet/IP Web Server Modules Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker...

The vulnerability of D-Link’s microprogrammed software-based router web interfaces, related to the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of the web interface of D-Link microprogrammed software routers lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially crafted SNMP request...

Unspecified Vulnerability in Technicolor TC7200.d1I

The Technicolor TC7200.d1I is a cable modem from the French Technicolor group. A security vulnerability exists in the Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT version. A remote attacker could exploit the vulnerability to obtain Wi-Fi credentials by sending an SNMP request...

Unspecified Vulnerability in Technicolor TC7110.B

Technicolor TC7110.B is a cable modem from the French Technicolor group. A security vulnerability exists in Technicolor TC7110.B STC version 8.62.02. A remote attacker could exploit the vulnerability to obtain Wi-Fi credentials by sending an SNMP request...