PT-2021-20830

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1004 and earlier Description: The issue allows Stored Cross-Site Scripting XSS in the Packet Analysis module. This means an attacker can inject malicious scripts into the system, which can then be...

PT-2021-20835

Name of the Vulnerable Software and Affected Versions: NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 Description: The issue allows for Arbitrary File Read operations. This is achieved via the "FDSQueryService" endpoint. Recommendations: For NETSCOUT Systems nGeniusONE version 6.3.0 build...

PT-2021-20831

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1196 and earlier Description: The issue allows Stored Cross-Site Scripting XSS in the UploadFile feature. This means an attacker can inject malicious scripts into the system, which can then be executed ...

“Huge upsurge” in DDoS attacks during pandemic

Researchers at Netscout have released a report analyzing the malicious internet traffic of 2020 and comparing it to the years before. Some of the results were as expected: Brute-forcing credentials and more targeting towards internet-connected devices were foreseeable and have been discussed at...

Cybercriminals Now Using Plex Media Servers to Amplify DDoS Attacks

A new distributed denial-of-service attack DDoS vector has ensnared Plex Media Server systems to amplify malicious traffic against targets to take them offline. "Plex's startup processes unintentionally expose a Plex UPnP-enabled service registration responder to the general Internet, where it ca...

CVE-2020-28251

NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The attacker must...

Command injection

NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The attacker must...

CVE-2020-28251

NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The attacker must...

CVE-2020-28251

CVE-2020-28251 affects NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier. The vulnerability enables a user to escalate privileges on a sensor, gaining administrative access to the sensor and root access to the operating system. The attacker reportedly must complete a password-cracking ...

Netscout AirMagnet Survey Permission License and Access Control Issues Vulnerability

Netscout AirMagnet Survey is a wireless site survey software from Netscout USA. The software can be used for real-world survey data collection and hypothetical scenario simulation, 802.11ac site surveys, 802.11n site surveys, validation of user and application requirements, unique RF spectrum and...

PT-2020-16956

Name of the Vulnerable Software and Affected Versions NETSCOUT AirMagnet Enterprise versions 11.1.4 build 37257 and earlier Description The issue allows an attacker to gain administrative access to a sensor, and subsequently, invoke a command to obtain root access to the operating system. This ca...

CVE-2020-28251: Undefined Security Weakness

NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The attacker must...

Anti-theft software LoJack hijacked by Russian Fancy Bear group

By Waqas Security researchers at Netscout's Arbor Networks’ Security Engineering & Response This is a post from HackRead.com Read the original post: Anti-theft software LoJack hijacked by Russian Fancy Bear group...

Design/Logic Flaw

NetScout formerly Network General Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/enUS/domains/adddomain.jsp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6701

NetScout formerly Network General Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/enUS/domains/adddomain.jsp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6701

NetScout formerly Network General Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/enUS/domains/adddomain.jsp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6701

NetScout Visualizer V2100 and InfiniStream i1730 expose a direct access path to ResourceManager/en_US/domains/add_domain.jsp, allowing remote attackers to obtain administrator privileges. The issue arises from lack of access restriction on this resource, enabling privilege escalation via a direct...

CVE-2008-6701: Undefined Security Weakness

NetScout formerly Network General Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/enUS/domains/adddomain.jsp, which allows remote attackers to gain administrator privileges via a direct request...