Android Security Bulletin—July 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-07-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Pixel / Nexus Security Bulletin—July 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-07-05 or later address all issues in this bulletin and all issues in the...

CVE-2018-12921

Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the meterinformation.htm, diagsystem.htm, or diagdnplanwan.htm URI...

Information disclosure

Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the meterinformation.htm, diagsystem.htm, or diagdnplanwan.htm URI...

CVE-2018-12921

Electro Industries GaugeTech Nexus devices are affected by an information-disclosure vulnerability (CVE-2018-12921). An attacker can remotely request specific URIs (meter_information.htm, diag_system.htm, or diag_dnp_lan_wan.htm) to obtain potentially sensitive information. The issue is documente...

CVE-2018-12921

Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the meterinformation.htm, diagsystem.htm, or diagdnplanwan.htm URI...

PT-2018-11479

Name of the Vulnerable Software and Affected Versions Electro Industries GaugeTech Nexus devices affected versions not specified Description The issue allows remote attackers to obtain potentially sensitive information by making a direct request for specific URI endpoints, including "meter...

CVE-2018-12921: Exposure of Sensitive Information to an Unauthorized Actor

Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the meterinformation.htm, diagsystem.htm, or diagdnplanwan.htm URI...

Electro Industries GaugeTech Nexus series Products Information Disclosure

Electro Industries GaugeTech Nexus series Products Information Disclosure Web Solutions in ZoomEye : https://www.zoomeye.org/searchResult?q=%22%3Ctitle%3ETotal%20Web%20Solutions%3C%2Ftitle%3E%22%20%2B%22Server%3A%20EIG%20Embedded%20Web%20Server%22 The default does not require authenticated...

Cisco Nexus 4000 Series Switch NX-OS Input Validation Vulnerability

The Cisco Nexus 4000 Series Switch is a 4000 series switch product from Cisco USA.NX-OS is a set of data center-grade operating system software used by the switches running in it. An input validation vulnerability exists in the Simple Network Management Protocol SNMP feature of NX-OS on the Cisco...

Cisco Nexus 3000 and 9000 Series Switches NX-OS Denial of Service Vulnerability

The Cisco Nexus 3000 and 9000 Series Switches are different series of switch devices from Cisco. the NX-OS is a set of data center-grade operating system software used by the switches that run on it. A denial of service vulnerability exists in the implementation of the CLI commands and the...

Multiple Cisco Products NX-OS Software CLI Parser Input Validation Vulnerability

Cisco MDS 9000 Series Multilayer Switches are products of Cisco Corporation.Cisco MDS 9000 Series Multilayer Switches is a 9000 series switch device.Nexus 2000 Series Fabric Extenders is a Nexus 2000 series switch array expander.NX-OS Software is a set of data center-class operating system softwa...

Multiple Cisco Products NX-OS Software Arbitrary Command Execution Vulnerability

Cisco MDS 9000 Series Multilayer Switches are products of Cisco Corporation.Cisco MDS 9000 Series Multilayer Switches is a 9000 series switch device.Nexus 2000 Series Fabric Extenders is a Nexus 2000 series switch array expander.NX-OS Software is the data center-class operating system software th...

Denial of Service Vulnerability in Multiple Cisco Products (CNVD-2018-12392)

Cisco Firepower 4100 Series Next-Generation Firewalls are all products of Cisco Corporation.Cisco Firepower 4100 Series Next-Generation Firewalls is a 4100 series firewall device. Cisco Firepower 4100 Series Next-Generation Firewalls are 4100 series firewalls.MDS 9000 Series Multilayer Switches a...

Multiple Cisco Products FXOS Software and NX-OS Software Discovery Protocol Component Input Validation Vulnerability

Cisco Firepower 4100 Series Next-Generation Firewalls are products of Cisco Corporation.Cisco Firepower 4100 Series Next-Generation Firewalls are 4100 Series firewalls.Nexus 1000V Series Switches are 1000V Series switches.FXOS Software is a set of firewall software running on Cisco security...

Command injection

A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by...

Design/Logic Flaw

A vulnerability in the Cisco Discovery Protocol formerly known as CDP subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent attacker to create a denial of service DoS condition. The vulnerability is due to a failure t...

CVE-2018-0310

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of service DoS condition on the affected product. The vulnerability exists because t...

CVE-2018-0309

A vulnerability in the implementation of a specific CLI command and the associated Simple Network Management Protocol SNMP MIB for Cisco NX-OS in standalone NX-OS mode on Cisco Nexus 3000 and 9000 Series Switches could allow an authenticated, remote attacker to exhaust system memory on an affecte...

CVE-2018-0311

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software insufficiently validates...