Lucene search
+L

5068 matches found

Prion
Prion
added 2022/09/09 3:15 p.m.26 views

Format string

The Baxter Spectrum WBM v16, v16D38 and Baxter Spectrum WBM v17, v17D19, v20D29 to v20D32 when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information...

4CVSS6.7AI score0.00612EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/09/09 3:15 p.m.30 views

Format string

The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service DoS on the WBM...

5.5CVSS7.7AI score0.00624EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/09 2:40 p.m.33 views

CVE-2022-26392 Format String vulnerability

The Baxter Spectrum WBM v16, v16D38 and Baxter Spectrum WBM v17, v17D19, v20D29 to v20D32 when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information...

3.1CVSS6.5AI score0.00612EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/09 2:40 p.m.84 views

CVE-2022-26393

CVE-2022-26393 is a Baxter Sigma Spectrum/WBM format-string vulnerability impacting Wi‑Fi SSID processing (v20D29 in WBM). The flaw allows attackers to trigger format string attacks to read memory and, in some contexts, cause DoS when processing SSID data over the Wi‑Fi interface. Affected produc...

8.1CVSS6.2AI score0.00624EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.7 views

PT-2022-17824 · Baxter · Baxter Spectrum Wbm

Name of the Vulnerable Software and Affected Versions: Baxter Spectrum WBM versions v16 through v17 Baxter Spectrum WBM versions v20D29 through v20D32 Description: The issue allows for format string attacks via application messaging when in superuser mode, potentially enabling an attacker to read...

6.5CVSS6.7AI score0.00612EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/09/09 12:0 a.m.66 views

Cisco Webex Meetings App Character Interface Manipulation (cisco-sa-webex-app-qrtO6YC2)

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

5.3CVSS6.1AI score0.00824EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/09/08 10:3 p.m.4 views

CVE-2022-26392

The Baxter Spectrum WBM v16, v16D38 and Baxter Spectrum WBM v17, v17D19, v20D29 to v20D32 when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information...

6.5CVSS5.9AI score0.00612EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/09/08 10:3 p.m.4 views

CVE-2022-26393

The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service DoS on the WBM...

8.1CVSS5.9AI score0.00624EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/09/08 1:15 p.m.35 views

CVE-2022-20696

A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...

8.8CVSS0.00356EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/08 1:15 p.m.9 views

CVE-2022-20696

A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...

8.8CVSS5.8AI score0.00356EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/08 1:15 p.m.20 views

Design/Logic Flaw

A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...

5.8CVSS8.3AI score0.00356EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2022/09/08 1:15 p.m.29 views

Design/Logic Flaw

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

5CVSS5.2AI score0.00824EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/08 12:30 p.m.15 views

CVE-2022-20696 Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability

A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...

7.5CVSS6.6AI score0.00356EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/09/08 12:30 p.m.34 views

CVE-2022-20696 Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability

A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...

7.5CVSS8.7AI score0.00356EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/08 12:30 p.m.98 views

CVE-2022-20696

Affected software : Cisco SD-WAN vManage Software containers. Vulnerability : binding configuration allows an unauthenticated, adjacent attacker with access to the VPN0 logical network to reach the messaging service ports due to insufficient protection. Impact : attacker can view and inject messa...

8.8CVSS7AI score0.00356EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2022/09/08 12:30 p.m.25 views

CVE-2022-20863 Cisco Webex Meetings App Character Interface Manipulation Vulnerability

A vulnerability in the messaging interface of Cisco Webex App, formerly Webex Teams, could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging interface. This vulnerability exists because the affected software does not properly handle character...

4.3CVSS5.5AI score0.00824EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/08 12:30 p.m.1356 views

CVE-2022-20863

Cisco Webex App (formerly Webex Teams) contains a vulnerability in its messaging interface that could allow an unauthenticated, remote attacker to manipulate displayed links or content by exploiting improper handling of character rendering. The issue arises when messages are processed in the inte...

5.3CVSS5AI score0.00824EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/09/07 11:0 p.m.11 views

CVE-2022-20696

A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...

8.8CVSS7.4AI score0.00356EPSS
SaveExploits0References2
Cisco
Cisco
added 2022/09/07 4:0 p.m.32 views

Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability

A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...

7.5CVSS7.3AI score0.00356EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/07 12:0 a.m.9 views

PT-2022-4711 · Cisco · Cisco Webex App

Name of the Vulnerable Software and Affected Versions: Cisco Webex App versions affected versions not specified Description: A vulnerability in the messaging interface of Cisco Webex App could allow an unauthenticated, remote attacker to manipulate links or other content within the messaging...

5.3CVSS5.2AI score0.00824EPSS
SaveExploits0References5
Rows per page
Query Builder