893 matches found
CVE-2023-34257
An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified and, by default, authentication is not required. Some configuration fields related to SNMP e.g., masterAgentName or masterAgentStartLine result in code execution when the agent is restarted...
Dataprobe iBoot-PDU 安全漏洞
The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A security vulnerability exists in Dataprobe iBoot-PDU FW prior to version 1.42.06162022, which stems from the product exposing multiple sensitive data fields, and can be exploited by an...
Moderate: net-snmp security and bug fix update
The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command...
net-snmp: NULL Pointer Exception when handling pv6IpForwarding
A flaw was found in Net-SNMP. This issue occurs because the handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP has a NULL Pointer Exception that could allow a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in a denial of service...
PT-2023-18687 · Aruba · Aruba Access Point Management Protocol
Name of the Vulnerable Software and Affected Versions: Aruba access point management protocol affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services, potentially leading to unauthenticated remote code execution. This can be...
PT-2023-18691 · Aruba · Aruba Access Point Management Protocol
Name of the Vulnerable Software and Affected Versions: Aruba access point management protocol affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services, potentially leading to unauthenticated remote code execution. This can be...
CISA Adds One Known Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors...
CVE-2023-25413
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials...
Veritas Backup Exec Agent File Access Vulnerability
Veritas Backup Exec BE Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine...
Veritas Backup Exec Agent Command Execution Vulnerability
Veritas Backup Exec BE Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine...
VulnCheck KEV: CVE-2021-27878
Veritas Backup Exec BE Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine...
The vulnerability in the implementation of the PAPI network protocol for ArubaOS operating systems allows a hacker to execute arbitrary code.
The vulnerability of the PAPI network protocol implementation in ArubaOS operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the implementation of the PAPI network protocol for ArubaOS operating systems allows a hacker to execute arbitrary code.
The vulnerability of the PAPI network protocol implementation in ArubaOS operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-22749
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities result in the...
CVE-2023-22751
CVE-2023-22751 describes an unauthenticated, stack-based buffer overflow in Aruba Networks’ PAPI protocol (UDP port 8211) that could allow remote code execution with privileges on the underlying OS. Several connected sources confirm this as a critical, network-exposed vulnerability affecting Arub...
PT-2023-7625 · Asus · Asus Asmb8 Ikvm
Name of the Vulnerable Software and Affected Versions: ASUS ASMB8 iKVM firmware versions 1.14.51 and earlier Description: The issue allows remote attackers to execute arbitrary code by using SNMP to create extensions. This can be demonstrated by using snmpset for NET-SNMP-EXTEND-MIB with /bin/sh...
ASUS ASMB8-iKVM 命令注入漏洞
ASUS ASMB8-iKVM is an effective remote server management chip from Asus China. A security vulnerability exists in ASUS ASMB8-iKVM version 1.14.51 and earlier, which originated from a vulnerability that allows remote attackers to execute arbitrary code by creating an extension using SNMP...
CVE-2023-20016
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup...
