EUVD-2022-40566

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37959 Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

...

CVE-2022-37959 Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

...

CVE-2022-37959

Technical details about CVE-2022-37959 (affected software, vulnerable component, impact, exploitation, or remediations) are not provided in the supplied documents. Monitor for vendor advisories and updated analyses.

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

...

Microsoft Network Device Enrollment Service (NDES) 安全漏洞

Microsoft Network Device Enrollment Service NDES is a Microsoft company that allows software on routers and other network devices running without domain credentials to obtain Simple Certificate Enrollment Protocol SCEP-based certificates. A security vulnerability exists in the Microsoft Network...

PT-2022-5780 · Microsoft · Network Device Enrollment Service +1

Name of the Vulnerable Software and Affected Versions: Network Device Enrollment Service NDES affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions and disclose protected information. I...

KLA19245 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

CVE-2022-37959: Undefined Security Weakness

Network Device Enrollment Service NDES Security Feature Bypass Vulnerability...

CVE-2022-37069

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat...

CVE-2022-36513

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist...

The vulnerability of the command-line interface (CLI) of Zyxel network device software allows a hacker to trigger a service failure.

The vulnerability of the command-line interface CLI of Zyxel network device software implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

GSD-2022-1004788 net: usb: ax88179_178a needs FLAG_SEND_ZLP

net: usb: ax88179178a needs FLAGSENDZLP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.254 by commit...

AZL-10137 CVE-2021-4135 affecting package kernel for versions less than 5.15.67.1-4

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsimmapallocelem being called. A local user could use this flaw to get unauthorized access to some data...

Xen 信息泄露漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that stems...

PT-2022-38050

Уязвимость функции m can read fifo модуля drivers/net/can/m can/m can.c драйвера поддержки сетевых устройств CAN ядра операционной системы Linux связана с раскрытием конфиденциальной информации. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2022-22309

The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface. This vulnerability can be more critical if the serial port is connected to a serial-over-lan device. IBM X-Force ID: 217095...

CVE-2021-37740

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a...

The vulnerability of the Common Gateway Interface (CGI) interface of microprogramming software for network devices such as ZyXEL USG, USG FLEX, ATP, ZyWALL, VPN, and NSG allows attackers to bypass authentication processes and gain increased privileges.

The vulnerability of the Common Gateway Interface CGI interface of ZyXEL USG, USG FLEX, ATP, ZyWALL, VPN, and NSG network devices is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass authentication processes and gain increased...

Buffer overflow

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping function via GOOSE can be...