Dell PowerScale OneFS 日志信息泄露漏洞

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS has a log information disclosure vulnerability that originates from writing sensitive information to SNMPv3 log files. An attacker could...

Ubiquiti UniFi Command Injection Vulnerability

Ubiquiti UniFi is a wireless networking system from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti UniFi Access Points 6.5.50 and earlier, and Switches 6.5.32 and earlier, which stems from an integer overflow vulnerability in UniFi Access Points and Switches except Switch Flex Mini wi...

Ubiquiti UniFi Input Validation Error Vulnerability

Ubiquiti UniFi is a wireless networking system from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti UniFi Access Points 6.5.50 and earlier, and Switches 6.5.32 and earlier, which stems from an integer overflow vulnerability in UniFi Access Points and Switches except Switch Flex Mini wi...

CVE-2023-37864

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device...

CVE-2023-37859

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root...

PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. A security vulnerability in PHOENIX CONTACTs WP 6xxx series web panels prior to version 4.0.10 exists in the web panels where a remote attacker with SNMPv2 write privileges may be able to use a...

PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACTs WP 6xxx series web panels prior to version 4.0.10, which can be exploited by an unauthenticated, remote attacker to gain read/write access to t...

CVE-2023-35981

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities...

PT-2023-25401 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access points affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services. These vulnerabilities could lead to unauthenticated remote code execution by sending speciall...

CVE-2023-35759

In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS...

The vulnerability of the CMPv2 protocol implementation in Juniper Networks’ Junos OS allows a attacker to trigger a service failure.

The vulnerability of the CMPv2 certification management protocol implementation in Juniper Networks’ Junos OS lies in insufficient checks for exceptional states. Exploiting this vulnerability allows a malicious actor to trigger a service failure remotely...

CVE-2023-34257

An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified and, by default, authentication is not required. Some configuration fields related to SNMP e.g., masterAgentName or masterAgentStartLine result in code execution when the agent is restarted...

Dataprobe iBoot-PDU 安全漏洞

The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A security vulnerability exists in Dataprobe iBoot-PDU FW prior to version 1.42.06162022, which stems from the product exposing multiple sensitive data fields, and can be exploited by an...

Moderate: net-snmp security and bug fix update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command...

net-snmp: NULL Pointer Exception when handling pv6IpForwarding

A flaw was found in Net-SNMP. This issue occurs because the handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP has a NULL Pointer Exception that could allow a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in a denial of service...

PT-2023-18687 · Aruba · Aruba Access Point Management Protocol

Name of the Vulnerable Software and Affected Versions: Aruba access point management protocol affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services, potentially leading to unauthenticated remote code execution. This can be...

PT-2023-18691 · Aruba · Aruba Access Point Management Protocol

Name of the Vulnerable Software and Affected Versions: Aruba access point management protocol affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services, potentially leading to unauthenticated remote code execution. This can be...

CISA Adds One Known Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors...

CVE-2023-25413

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials...

Veritas Backup Exec Agent File Access Vulnerability

Veritas Backup Exec BE Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine...