Hardcoded credentials

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establis...

ManageEngine Network Configuration Manager Detection (HTTP)

HTTP based detection of ManageEngine Network Configuration Manager. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ring video doorbells information leakage vulnerability

Ring formerly known as DoorBot video doorbells is a video-enabled smart doorbell from Ring, USA. A security vulnerability exists in Ring video doorbells. The vulnerability can be exploited by a remote attacker to obtain wireless network configuration information by pressing and holding the Setup...

Design/Logic Flaw

Ring formerly DoorBot video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the GainSpan Wi-Fi module...

RHEL 7 : dhcp (RHSA-2018:0158)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0158 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

Parity Ethereum Client Overly Permissive Cross-domain Whitelist JSON-RPC vulnerability

Summary An exploitable overly permissive cross-domain CORS whitelist vulnerability exists in JSON-RPC of Parity Ethereum client version 1.7.8. An automatically sent JSON object to JSON-RPC endpoint can trigger this vulnerability. A victim needs to visit malicious website to trigger this...

Director showing error "Network unreachable. Check configuration, authentication, or service availability"

While connecting to Citrix ADMMAS from Director customer is getting error "Network unreachable. Check configuration, authentication, or service availability. " For configuring the Director with Citrix ADMMAS follow the...

The vulnerability of the Smart Network Configuration Manager’s automatic network configuration management system, related to authentication mechanisms that lack sufficient protection, allows attackers to circumvent network firewall restrictions.

The vulnerability of the Smart Network Configuration Manager’s automatic network configuration management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass network firewalls by using a Zebedee client that connects t...

The vulnerability of the Java RMI interface of the Smart Network Configuration Manager system allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the Java RMI interface of the Smart Network Configuration Manager, a system for automatic management of network configurations, is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary...

CVE-2017-8017

EMC Network Configuration Manager NCM 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system...

Cross site scripting

EMC Network Configuration Manager NCM 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system...

CVE-2017-8017

EMC Network Configuration Manager NCM 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system...

Best Practices for Deployment of CITRIX SD-WAN

To configure the management access of SDWAN in a secure manner. https://docs.netscaler.com/en-us/citrix-sd-wan Citrix SD-WAN editions are typically deployed in an enterprise private network. We recommend that you deploy the Citrix SD-WAN solution wherein the management IPs are accessible only fro...

Foscam IP Video Camera CGIProxy.fcgi DNS2 Address Configuration Command Injection Vulnerability(CVE-2017-2848)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configurati...

YaST2 network file read vulnerability

Novell YaST Yet another Setup Tool is a set of RPM-based installation and configuration tools for the openSUSE and SUSE Linux Enterprise operating systems from the U.S. company Novell. The tool can configure the system hardware, network, services, etc. YaST2 network is one of the packages to mana...

Code injection

The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks...

CVE-2011-3177

The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks...

CVE-2011-3177

Summary: CVE-2011-3177 concerns YaST2 network creating files with world-readable permissions, allowing local users to read sensitive network config data (e.g., wireless passwords). Affected components: YaST2 network handling; YaST2 network configuration files. Root cause (as documented): Files cr...

CVE-2017-13771

CVE-2017-13771 affects Lexmark Scan To Network (SNF)

UBUNTU-CVE-2016-0764

Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary...