NETGEAR NMS300 Denial of Service Vulnerability (CNVD-2020-75518)

The NETGEAR NMS300 is a ProSAFE network management system. A denial of service vulnerability exists in NETGEAR NMS300 versions prior to 1.6.0.27. No detailed vulnerability details are available at this time...

Netgear NMS300 安全漏洞

The NETGEAR NMS300 is a ProSAFE network management system. A denial of service vulnerability exists in NETGEAR NMS300 versions prior to 1.6.0.27. No detailed vulnerability details are available at this time...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain access to protected information.

The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the REST API implementation of the network management system’s data center management module allows a attacker to re-record any files on the device.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to errors in processing input data. Exploiting this vulnerability allows an attacker to re-record any files on the device remotely...

Opportunities and Threats – IoT and the Rise of 5G

The Internet of Things IoT is expanding rapidly. The number of connected devices in homes, businesses, and vehicles across the world is expected to increase from around 8 billion today to over 24 billion within the next decade, with much of this growth enabled by the introduction of 5G. This...

Important: Red Hat Security Advisory: net-snmp security and bug fix update

An update for net-snmp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2020-7536

A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs BMXP34 versions prior to V3.30 Modicon M340 Communication Ethernet modules BMXNOE0100 H versions prior to V3.4 BMXNOE0110 H versions prior to V6.6 BMXNOR0200H all versions, that could cause th...

net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion

Exploit Title: Sony BRAVIA Digital Signage 1.7.8 - Unauthenticated Remote File Inclusion Date: 20.09.2020 Exploit Author: LiquidWorm Vendor Homepage: https://pro-bravia.sony.net Version: 1.7.8 Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion Vendor: Sony Electronics Inc...

Cisco IoT Field Network Director Credentials Insecure Storage Vulnerability

Cisco IoT Field Network Director FND is a network management system for large-scale FAN deployments. A credentials insecure storage vulnerability exists in Cisco IoT Field Network Director versions prior to 4.6.1. The vulnerability stems from inadequate protection of user credentials. An attacker...

Aviatrix Controller Encryption Key Plaintext Storage Vulnerability

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. An encryption key plaintext storage vulnerability exists in Aviatrix Controller versions prior to R5.3.1151. An attacker can exploit this vulnerability to obtain plaintext...

Aviatrix Controller Arbitrary File Upload Vulnerability

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. An arbitrary file upload vulnerability exists in Aviatrix Controller versions prior to R6.0.2483. The vulnerability stems from several APIs that contain functionality that...

Important: Red Hat Security Advisory: net-snmp security update

An update for net-snmp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

The vulnerability of the SNMP protocol implementation in Cisco Firepower Threat Defense microprogramming systems allows attackers to induce service failure.

The vulnerability of the SNMP protocol implementation in Cisco Firepower Threat Defense microprogramming devices is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending a large number of...

Moxa MXView series installation privilege escalation vulnerability

Talos Vulnerability Report TALOS-2020-1148 Moxa MXView series installation privilege escalation vulnerability November 3, 2020 CVE Number CVE-2020-13537,CVE-2020-13536 SUMMARY Multiple exploitable local privilege elevation vulnerabilities exist in the file system permissions of Moxa MXView series...

The vulnerability of the var_interfacestatus function in the microprogramming software for Moxa EDR-810 allows a intruder to trigger an emergency shutdown of the device.

The vulnerability of the varinterfacestatus function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...

The vulnerability of the `var_NetworkSettingDhcpSvrRoute` function in the Moxa EDR-810 industrial router’s software allows a attacker to trigger an emergency shutdown of the device.

The vulnerability of the varNetworkSettingDhcpSvrRoute function in the Moxa EDR-810 industrial router’s microprogramming system is related to the lack of input data verification when accessing by using the OID identifier index. Exploiting this vulnerability can allow a malicious actor to trigger ...

The vulnerability of the var_lldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 allows a hacker to trigger an emergency shutdown of the device.

The vulnerability of the varlldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...