CVE-2023-41559

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting...

The vulnerability of the fromNatStaticSetting() function in the microprogramming software for Tenda F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromNatStaticSetting function in the microprogramming software for Tenda F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 lies in the fact that the operation outputs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a...

CVE-2023-3273

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing settings of the device such as the IP address based on missing access control...

CVE-2023-33684

Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 Apr 19 2021 Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol...

PT-2023-24447 · Db Elettronica Telecomunicazioni Spa · Sft Dab 600/C Bios Firmware +4

Name of the Vulnerable Software and Affected Versions: DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware version 1.9.3 DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Bios firmware version 7.1 DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Gui version 2.46 DB Elettronica...

The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created data...

CVE-2023-28217

Windows Network Address Translation NAT Denial of Service Vulnerability...

CVE-2023-28217

Windows Network Address Translation NAT Denial of Service Vulnerability...

CVE-2023-28217 Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

Microsoft Windows Network Address Translation (NAT) 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows Network Address Translation NAT. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

PT-2023-2414 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of Network Address Translation NAT technology in Windows operating systems, which is associated with insufficient input validation. This can be...

CVE-2023-1456

A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing of the component NAT Configuration Handler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been...

The vulnerability of the Network Address Translation (NAT) technology implementation in the FastL4 network interface card of the BIG-IP Advanced Firewall Manager virtual server allows a attacker to cause a service failure.

The vulnerability of the Network Address Translation NAT technology implemented in the FastL4 network interface card of the BIG-IP Advanced Firewall Manager virtual server relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause a servi...

K57214415: NAT slipstream vulnerability

Security Advisory Description This vulnerability exploits the application layer gateway ALG mechanism of network address translations NATs, routers, and firewalls through modification of internal IP extractions for a client browser connection and therefore bypasses the browser's port restrictions...

K00721320: BIG-IP AFM NAT64 policy vulnerability CVE-2022-41806

Security Advisory Description When a BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. CVE-2022-41806 Impact System performance can degrade until the TMM...

SUSE CVE-2020-24336

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is sane. Therefore, when copying an address of an arbitrary length, a buffer overflow can occur. Thi...

SUSE CVE-2021-29922

library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation...

Malicious Package

Overview awscl is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass import...

The vulnerability of the control panel interface of the FortiADC application allows attackers to execute cross-site scripting attacks.

The vulnerability of the FortiADC application delivery controller interface exists because measures are not taken to protect the structure of the web page during its creation. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created ...