CVE-2017-6795

Cisco IOS XE Software on Cisco ASR 920 Series Routers is affected by CVE-2017-6795 due to improper input validation in the USB-modem code (platform usb modem CLI command). A local, authenticated attacker could exploit this to overwrite arbitrary files on the device’s underlying operating system. ...

CVE-2017-6795

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper inpu...

CVE-2017-6796

CVE-2017-6796 affects Cisco IOS XE Software on Cisco ASR 920 Series Routers. The vulnerability resides in the USB-modem code and stems from improper input validation of the platform usb modem command in the CLI, enabling an authenticated, local attacker to inject and execute arbitrary commands on...

CVE-2017-6796

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to...

Cisco IOS XE Software for Cisco ASR 920 Series Routers Arbitrary File Overwrite Vulnerability

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper inpu...

Cisco IOS XE Software for Cisco ASR 920 Series Routers Arbitrary Command Execution Vulnerability

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to...

ZTE ADSL ZXV10 W300 Information Disclosure Vulnerability

The ZTE ADSL ZXV10 W300 is an ADSL modem Modem product from China's ZTE Corporation ZTE. A security vulnerability exists in ZTE ADSL ZXV10 W300 W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57. A remote attacker can exploit the vulnerability by logging into the target account with the help of arbitrar...

ZTE ADSL ZXV10 W300 Information Disclosure Vulnerability (CNVD-2017-28178)

The ZTE ADSL ZXV10 W300 is an ADSL modem Modem product from China's ZTE Corporation ZTE. A security vulnerability exists in the ZTE ADSL ZXV10 W300 W300V2.1.0fER7PEO57 version and W300V2.1.0hER7PEO57 version. A remote attacker can exploit the vulnerability to obtain user passwords...

ZTE ADSL ZXV10 W300 Password Interception Vulnerability

The ZTE ADSL ZXV10 W300 is an ADSL modem Modem product from China's ZTE Corporation ZTE. A security vulnerability exists in the ZTE ADSL ZXV10 W300 W300V2.1.0fER7PEO57 version and W300V2.1.0hER7PEO57 version. A remote attacker can exploit this vulnerability to change the administrator password by...

Code injection

ZTE ADSL ZXV10 W300 modems W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet connection...

CVE-2015-7259

ZTE ADSL ZXV10 W300 modems (W300V2.1.0f_ER7_PE_O57, W300V2.1.0h_ER7_PE_O57) expose an authentication flaw where a remote authenticated user can log in to a target account using any valid username/password pair, effectively enabling unauthorized access via multiple credential pairs (information di...

CVE-2015-7259

ZTE ADSL ZXV10 W300 modems W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 allow user accounts to have multiple valid username and password pairs, which allows remote authenticated users to login to a target account via any of its username and password pairs...

[SECURITY] Fedora 26 Update: torbrowser-launcher-0.2.8-1.fc26

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your lan guage and for your...

Huawei honor 8 Pro integer overflow vulnerability

Huawei honor 8 Pro is a smartphone from Chinese company Huawei Huawei. An integer overflow vulnerability exists in the Huawei honor 8 Pro. An attacker sending a response message to the device that contains an illegal length could generate an integer overflow and cause the modem system to reboot...

Security Advisory - Integer Overflow Vulnerability in Some Huawei Products

There is an integer overflow vulnerability in some Huawei products. The attacker sends a response message to the device, which contains an illegal length field, it could produce an integer overflow and restart the modem system. Vulnerability ID: HWPSIRT-2017-06005 This vulnerability has been...

Ford, BMW, Infiniti and Nissan TCU presence of a vulnerability, can be remote intrusion-vulnerability warning-the black bar safety net

! Three researchers found that Ford, BMW, Infiniti and Nissan Automatic Transmission Control UnitTCUin the presence of a vulnerability, these TCU are made by Continental AG production. Vulnerability causes The three researchers from McAfee, respectively, is Mickey Shkatov, Jesse, Michael and...

Comcast Firmware Remote Code Execution Vulnerability in Multiple Cisco Products

Cisco DPC3939 XB3 and others are wireless home voice gateway products from Cisco USA.Arris TG1682G is a modem product from Arris USA.Comcast is a suite of Comcast-developed firmware that runs in gateway and modem devices. A security vulnerability exists in the Comcast firmware in several Cisco...

Cisco DPC3939 Firmware Unauthorized Operation Vulnerability

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. Allows a remote attacker to discover the CM MAC address through an xfinitywifi hotspot connected to the device...

CVE-2017-11648

The CVE-2017-11648 issue affects Techroutes TR 1803-3G Wireless Cellular Router/Modem (firmware 2.4.25). The vulnerability is a Cross-Site Request Forgery (CSRF) flaw in which the device has no CSRF protections, enabling an attacker to trigger sensitive actions (e.g., goform/BasicSettings to disa...

CVE-2017-9484

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to discover a CM MAC address by sniffing Wi-Fi traffic and performing simple arithmetic...