CVE-2023-33684

Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 Apr 19 2021 Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol...

Authentication flaw

Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 Apr 19 2021 Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol...

CVE-2023-33684

Summary of CVE-2023-33684 (DB Elettronica Screen SFT DAB 600/C): The vulnerability stems from weak session management that lets an attacker on the same network bypass authentication by reusing the device’s NAT-assigned IP. Affected components/versions include Firmware 1.9.3, Bios 7.1 (Apr 19 2021...

DB Elettronica Telecomunicazioni SpA Screen SFT DAB 600/C 安全漏洞

DB Elettronica Telecomunicazioni SpA Screen SFT DAB 600/C is a new radio DAB transmitter from DB Elettronica Telecomunicazioni SpA, Italy. A security vulnerability exists in the DB Elettronica Telecomunicazioni SpA Screen SFT DAB 600/C. An attacker could exploit the vulnerability by assigning an ...

Sofia-SIP 输入验证错误漏洞

Sofia-SIP is an open source SIP user agent library from the individual developers of freeswitch that conforms to the IETF RFC3261 specification. A security vulnerability exists in Sofia-SIP versions prior to 1.13.15, which stems from a lack of attribute length checking when Sofia-SIP processes ST...

Screen SFT DAB 600/C - Authentication Bypass Erase Account Exploit

!/usr/bin/env python3 Exploit Title: Screen SFT DAB 600/C - Authentication Bypass Erase Account Exploit Author: LiquidWorm Vendor: DB Elettronica Telecomunicazioni SpA Product web page: https://www.screen.it | https://www.dbbroadcast.com...

Screen SFT DAB 600/C - Authentication Bypass Reset Board Config Exploit

!/usr/bin/env python3 Exploit Title: Screen SFT DAB 600/C - Authentication Bypass Reset Board Config Exploit Author: LiquidWorm Vendor: DB Elettronica Telecomunicazioni SpA Product web page: https://www.screen.it | https://www.dbbroadcast.com...

Screen SFT DAB 600/C Authentication Bypass / Reset Board Config

!/usr/bin/env python3 Screen SFT DAB 600/C Authentication Bypass Reset Board Config Exploit Vendor: DB Elettronica Telecomunicazioni SpA Product web page: https://www.screen.it | https://www.dbbroadcast.com https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/ Affected version:...

Screen SFT DAB 600/C Authentication Bypass Account Creation Exploit

Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...

CVE-2023-28217

Windows Network Address Translation NAT Denial of Service Vulnerability...

Denial of service

Windows Network Address Translation NAT Denial of Service Vulnerability...

CVE-2023-28217 Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

CVE-2023-28217

CVE-2023-28217 is a Windows NAT Denial of Service vulnerability. The NVD entry lists CVSSv3.1 base score 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. It is network-exploitable with no user interaction, no privileges required, and affects availability only. The connected do...

CVE-2023-28217 Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

CVE-2023-1456

A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing of the component NAT Configuration Handler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been...

Command injection

A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing of the component NAT Configuration Handler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been...

PT-2023-7473 · Ubiquiti · Ubiquiti Edgerouter X

Name of the Vulnerable Software and Affected Versions: Ubiquiti EdgeRouter X version 2.0.9-hotfix.6 Description: The issue exists due to insufficient input validation in the NAT Configuration Handler component of the Ubiquiti EdgeRouter's firmware, potentially allowing a remote attacker to execut...

CVE-2023-1456

CVE-2023-1456 affects Ubiquiti EdgeRouter X firmware 2.0.9-hotfix.6. The root cause is insufficient input validation in the NAT Configuration Handler, enabling remote command injection. Several sources confirm a remote exploit possibility; exploitation status is not uniformly characterized, but P...

K31864522: Linux kernel vulnerability CVE-2019-9162

Security Advisory Description In the Linux kernel before 4.20.12, net/ipv4/netfilter/nfnatsnmpbasicmain.c in the SNMP NAT module has insufficient ASN.1 length checks aka an array index error, making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation...