BSA-2017-240

Security Advisory ID : BSA-2017-240 Component : SNMP Revision : 1.0: Interim The Simple Network Management Protocol SNMP is a commonly used network service. Its primary function is to provide network administrators with information about all kinds of network connected devices. SNMP can be used to...

BSA-2017-242

Security Advisory ID : BSA-2017-242 Component : Linksys Revision : 1.0: Interim LinksysEtherFastBEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community strin...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2017-06700)

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in the Simple Network Management Protocol SNMP subsystem in Cisco IOS XE Software. A remote attacker could exploit this vulnerability to cause a denial of service devi...

CVE-2016-1559

D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP...

CVE-2016-1557

Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP...

PT-2017-7966 · D Link · Dap-2553 +2

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1353 versions 3.15 and earlier D-Link DAP-2553 versions 1.31 and earlier D-Link DAP-3520 versions 1.16 and earlier Description: The issue allows the revelation of wireless passwords and administrative usernames and passwords over...

Race condition

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

CVE-2017-6615

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...

Opsview cross-site scripting vulnerability (CNVD-2017-05202)

Opsview is a suite of enterprise-class network, server and application monitoring tools from Opsview UK. The tool can be integrated with monitoring systems such as NagiosCore and RRDTool. A cross-site scripting vulnerability exists in versions of Opsview prior to 2015-11-06. A remote attacker can...

Spiceworks Desktop Cross-Site Scripting Vulnerability

Spiceworks Desktop is a suite of network device management and monitoring software for small and medium-sized businesses from Spiceworks USA. A cross-site scripting vulnerability exists in versions of Spiceworks Desktop prior to 2015-12-01. A remote attacker can exploit this vulnerability to...

CVE-2016-5642

Opmantek NMIS before 8.5.12G has XSS via SNMP...

CVE-2016-5074

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

CVE-2016-5078

Paessler PRTG before 16.2.24.4045 has XSS via SNMP...

CVE-2016-5077

Netikus EventSentry before 3.2.1.44 has XSS via SNMP...

Cisco IOS XE Cluster Management Protocol Telnet Option Handling RCE (cisco-sa-20170317-cmp)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a remote code execution vulnerability in the Cluster Management Protocol CMP subsystem due to improper handling of CMP-specific Telnet options. An unauthenticated, remot...

Cisco IOS Cluster Management Protocol Telnet Option Handling RCE (cisco-sa-20170317-cmp)

According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by a remote code execution vulnerability in the Cluster Management Protocol CMP subsystem due to improper handling of CMP-specific Telnet options. An unauthenticated, remote...

The vulnerability of Cisco Systems Inc.’s network devices allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability in the code that handles CMP protocol for networking devices of Cisco Systems Inc. is related to incorrect processing of Telnet options specific to the CMP protocol. Additionally, there are no restrictions on the reception and processing of Telnet messages from sources that are...

Moxa NPort Information Disclosure Vulnerability

Moxa NPort devices are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Moxa Management Protocol Detection

Moxa SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106693";...

Cisco IOS Software Cluster Management Protocol Remote Code Execution Vulnerability (cisco-sa-20170317-cmp)

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...