Cisco Firepower Threat Defense Software SNMP DoS (cisco-sa-ftd-snmp-dos-R8ENPbOs)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the Simple Network Management Protocol SNMP input packet processor that could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly. The...

Solarwinds Orion Platform has an unspecified vulnerability

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based browsing of the entire network, etc....

Kaseya VSA Remote Code Execution Vulnerability

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A security vulnerability exists in Kaseya VSA versions prior to 9.5.5, which can be exploited by an attacker to remote...

IBM Tivoli Netcool/Impact Information Disclosure Vulnerability

IBM Tivoli Netcool/Impact is a suite of network management software from IBM, USA. The software has the ability to automate business-critical functions and provide a platform that provides unified access to real-time data, events and indicators. A security vulnerability exists in IBM Tivoli...

CVE-2021-33539

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web...

CVE-2021-33539

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web...

Command Execution Vulnerability in Ruijie Networks - EWEB Network Management System (CNVD-2021-40746)

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A command execution vulnerability exists in the Ruijie Network-EWEB network management system, which can be exploited by an attacke...

Command Execution Vulnerability in Ruijie Networks - EWEB Network Management System (CNVD-2021-40747)

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A command execution vulnerability exists in the Ruijie Network-EWEB network management system, which can be exploited by an attacke...

Command Execution Vulnerability in Ruijie Networks - EWEB Network Management System (CNVD-2021-40753)

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A command execution vulnerability exists in the Ruijie Network-EWEB network management system, which can be exploited by an attacke...

ansible: user data leak in snmp_facts module

A flaw was found in ansible. The 'authkey' and 'privkey' credentials are disclosed by default and not protected by nolog feature when using the snmpfacts module. Attackers could take advantage of this information to steal the SNMP credentials. The highest threat from this vulnerability is to data...

Advantech iView² suffers from SQL injection vulnerability

iView² is a network element management system based on SNMP configuration and management of B B SmartWorx chassis and module products It is a WEB application whose main functional programs are located on a WEB server and can be accessed by all users via a WEB browser. An SQL injection vulnerabili...

Trend Micro Inc. Home Network Security tdts.ko chrdev_ioctl_handle privilege escalation vulnerability

Summary A privilege escalation vulnerability exists in the tdts.ko chrdevioctlhandle functionality of Trend Micro, Inc. Home Network Security 6.1.567. A specially crafted ioctl can lead to code execution. An attacker can issue an ioctl to trigger this vulnerability. Tested Versions Trend Micro,...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

The vulnerability of Cisco Firepower Management Center’s network management software, related to resource exhaustion, allows a intruder to trigger a service failure.

The vulnerability of Cisco Firepower Management Center’s network management software is related to resource exhaustion. Exploiting this vulnerability can allow a malicious actor to deny service to the system...

多款 Siemens 设备缓冲区错误漏洞

Siemens SIMATIC is a configuration software from Siemens. A denial of service vulnerability exists in multiple Siemens products. The vulnerability originates from specially crafted packets sent to port 161/UDP and can be exploited by an attacker to cause the SNMP service on the affected device to...

PT-2021-17889 · Stormshield · Stormshield Sns

Name of the Vulnerable Software and Affected Versions: Stormshield SNS versions prior to 3.7.18 Stormshield SNS versions prior to 3.11.6 Stormshield SNS versions prior to 4.1.6 Description: The issue is related to a memory-management defect in the SNMP plugin, which can cause excessive consumptio...

PT-2021-2985 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the Cisco SD-WAN vManage Software, which could allow an unauthenticated, remote attacker to execute arbitrary code ...

Stormshield Network Security 资源管理错误漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network Security has a security vulnerability that can be exploited by an attacker to trigger a denial of service via a fatal error via Stormshield Network Security's SNMP...

Command Execution Vulnerability in Atech Network Management System

Ltd. is a small and medium-sized network solution provider and service provider in China. A command execution vulnerability exists in the Atech Network Management System. An attacker can exploit this vulnerability to gain server privileges...

Aruba Networks AirWave Management Platform Deserialization Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A deserialization vulnerability exists in Aruba Networks AirWave...