1811 matches found
Opmantek NMIS Cross-Site Scripting Vulnerability
Opmantek NMIS is an open source, scalable network management platform from Opmantek Australia. A cross-site scripting vulnerability exists in versions of Opmantek NMIS prior to 8.5.12G. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via SNMP...
Netikus EventSentry Cross-Site Scripting Vulnerability
Netikus EventSentry is an event log monitoring manager from NETIKUS.NET that provides real-time log analysis, memory event correlation and threat attack response. A cross-site scripting vulnerability exists in versions of Netikus EventSentry prior to 3.2.1.44. A remote attacker can exploit this...
PT-2017-2508
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions 2.2 through 3.17 Description The Simple Network Management Protocol SNMP subsystem of Cisco IOS contains multiple vulnerabilities due to a buffer overflow...
PT-2017-2507 · Cisco · Cisco Ios +1
Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions 2.2 through 3.17 Description: The Simple Network Management Protocol SNMP subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could...
BSA-2017-316
Security Advisory ID : BSA-2017-316 Component : SNMP Revision : 1.0: Interim In SNMP version 1 & 2 authentication should only accept the value stored in the SNMP agent authentication mechanism. With this vulnerability an attacker can use any value string or integer in order to authenticate the SN...
Cambium Networks ePMP Elevation of Privilege Vulnerability
Cambium Networks ePMP is a suite of wireless network access platforms from Cambium Networks, USA. The platform provides video surveillance, Wi-Fi hotspot and sensor connectivity. An elevation of privilege vulnerability exists in Cambium Networks ePMP that stems from a failure to properly restrict...
Cisco PI and EPNM XML External Entity Injection Vulnerability
Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM are both products of the U.S. Cisco Cisco.PI is a set of solutions for wireless management through Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technologies; EPNM is a network...
Schneider Electric U.motion Builder Local Elevation of Privilege Vulnerability
U.motion Builder is a builder product from Schneider Electric France. A local elevation of privilege vulnerability exists in Schneider Electric U.motion Builder. The network management account is set to function as sudo without a password. An attacker can exploit the vulnerability to execute...
SNMP Protocol Community String Authentication Privilege Bypass Vulnerability in Riptide RG-WALL-160S Firewall
RG-WALL 160S is a 100 Gigabit firewall product launched by Ruijie Network. The RG-WALL-160S firewall has a SNMP protocol community string authentication privilege bypass vulnerability. It allows an attacker to bypass SNMP access control by utilizing arbitrary strings or integer values to write...
Not all Cloud Solutions are Created Equal
The errant swing of a backhoe in a New Jersey field cuts through a major cloud provider's underground cable, bringing activity along the U.S. Eastern Seaboard to a crashing halt. The outage hits some businesses hard. Every minute of downtime means thousands of dollars of lost revenue and hordes o...
StringBleed attack: analysis of the SNMP Protocol remote code execution vulnerability-vulnerability warning-the black bar safety net
Write in front of words In the last year, held in Las Vegas, USA the twenty-fourth session of the DEFCON hacker conference, I, like everyone discussed about the IOT device SNMP write privileges to the security issues. We found through research, police patrol cars, ambulances, and other...
BSA-2017-243
Security Advisory ID : BSA-2017-243 Component : SNMP Revision : 1.0: Interim The Simple Network Management Protocol SNMP is a commonly used network service. Its primary function is to provide network administrators with information about all kinds of network connected devices. SNMP can be used to...
BSA-2017-240
Security Advisory ID : BSA-2017-240 Component : SNMP Revision : 1.0: Interim The Simple Network Management Protocol SNMP is a commonly used network service. Its primary function is to provide network administrators with information about all kinds of network connected devices. SNMP can be used to...
BSA-2017-242
Security Advisory ID : BSA-2017-242 Component : Linksys Revision : 1.0: Interim LinksysEtherFastBEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community strin...
BSA-2017-239
Security Advisory ID : BSA-2017-239 Component : SNMP Revision : 1.0: Interim The Simple Network Management Protocol SNMP is a commonly used network service. Its primary function is to provide network administrators with information about all kinds of network connected devices. SNMP can be used to...
BSA-2017-238
Security Advisory ID : BSA-2017-238 Component : SNMP Revision : 1.0: Interim The Simple Network Management Protocol SNMP is a commonly used network service. Its primary function is to provide network administrators with information about all kinds of network connected devices. SNMP can be used to...
SNMP Protocol Community String Authentication Privilege Bypass Vulnerability in Some Vendor Devices
SNMP is a network management standard based on the TCP/IP protocol family and is a standard protocol for managing network nodes such as servers, workstations, routers, switches, etc. in an IP network. SNMP protocol community strings of some vendors' devices have authentication privilege bypass...
Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2017-06700)
Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in the Simple Network Management Protocol SNMP subsystem in Cisco IOS XE Software. A remote attacker could exploit this vulnerability to cause a denial of service devi...
CVE-2016-1559
D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP...