Arista EOS security vulnerabilities

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. A security vulnerability exists in Arista EOS that stems from a malformed or truncated packet received through a VXLAN tunnel and forwarded in hardware may cause the egress port to fa...

CVE-2023-37249

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

PT-2023-4731 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device to unexpectedly...

Online Exam System Master.php File SQL Injection Vulnerability

Online Exam System is an online exam system. Online Exam System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameters columns, data of /classes/Master.php?f=deleteservice/kelasdosen/data for external input SQL statements. An attacker can...

ONOS vulnerable to Cross-site Scripting

A cross-site scripting XSS vulnerability in Open Network Operating System ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the authorizationURL parameter of the API documentation dashboard under securityDefinitions...

Open Networking Foundation ONOS security vulnerabilities

Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1, which stems from the fact that ONOS will modify...

PT-2023-12984 · Onos · Onos

Name of the Vulnerable Software and Affected Versions: ONOS version 2.5.1 Description: An issue was discovered in ONOS where an intent with the same source and destination shows the INSTALLING state, indicating that its flow rules are installing. Improper handling of such an intent is misleading ...

Open Networking Foundation ONOS security vulnerabilities

Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1, which originates in IntentManager, where an...

Security Bulletin: Vulnerability in Enterprise Network Operating System (ENOS) affects IBM BladeCenter Switch Products (CVE-2017-3765)

Summary IBM BladeCenter Switch Products have addressed the following vulnerability in Enterprise Network Operating System ENOS. Vulnerability Details Summary IBM BladeCenter Switch Products have addressed the following vulnerability in Enterprise Network Operating System ENOS. Vulnerability Detai...

Cisco ASR 9000 Series buffer error vulnerabilities

Cisco IOS and others are products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco ASR 900 is a 900 Series Aggregation Services Router.Cisco ASR 9000 is a 9000 Series Aggregation Services Router. A security vulnerability exists in the Cisco ASR 9000...

Dell Enterprise SONiC OS has an unspecified vulnerability

Dell Enterprise SONiC OS Dell Enterprise Sonic Operating System is an open source network operating system from Dell, Inc. A remote attacker could exploit this vulnerability to cause unauthorized access to communications...

Cisco IOS Login Block DoS

The vulnerability of the Login Enhancements Login Block function in Cisco IOS operating systems is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Aruba Networks ArubaOS and Instant PAPI Protocol Buffer Overflow Vulnerability

ArubaOS is the network operating system for Aruba Mobility Controllers, Mobility Masters, and controller-managed access points APs. instantOS is an Arch Linux-based distribution. aruba networks ArubaOS and Instant PAPI The Aruba Networks ArubaOS and Instant PAPI protocols are vulnerable to a buff...

Cisco IOS XE Software: Operating System Command Injection Vulnerability

Cisco IOS XE Software is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity. Cisco IOS XE Software suffers from an operating system command injection...

Cisco IOS XR security vulnerabilities

Cisco IOS XR is a set of operating systems developed by the U.S.-based Cisco for its network devices. A security vulnerability exists in Cisco IOS XR that originates as a result of a heap buffer overflow in certain messages, which can be exploited by an attacker by sending a malicious packet to a...

FXOS CLI Command Execution Root Privilege

The vulnerability of the command-line interface CLI of the networking operating system FXOS exists because measures to neutralize the special elements used in the operating system’s commands have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

Vulnerabilities fixed in Cisco NX-OS and FXOS

Cisco has fixed vulnerabilities in NX-OS and FXOS for various Firepower, Nexus and UCS hardware. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or use command-injection to execute commands on the vulnerable system with root privileges. To exploit the...

Cisco IOS XE Software input validation error vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices.Cisco IOS XE has an elevation of privilege vulnerability that can be exploited by attackers to execute arbitrary commands as root...

Cisco IOS XE Software buffer error vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices.A denial of service vulnerability exists in Cisco IOS XE AVC-FNF, which originates from packets that do not adequately validate traffic inspected by the AVC function and can be exploited by attackers to cause a...

Cisco Discovery Protocol Service DoS

The vulnerability of the Cisco Discovery Protocol Service for network operating systems based on Cisco NX-OS and FXOS routers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending specially crafted malicious messages...