DELL Dell Networking OS10 信息泄露漏洞

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL, Inc. Dell Networking OS10 is vulnerable to information disclosure, which can be exploited by a low-privilege authenticated attacker to gain access to SNMP authentication failure messages...

The vulnerability of the SNMPv3 implementation of the microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the SNMPv3 implementation of micro-programming-based network interface controllers from Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass...

LPAR2RRD 操作系统命令注入漏洞

Xorux LPAR2RRD is a server monitoring tool from the Czech company Xorux. A security vulnerability in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD versions prior to 7.30 can be exploited by an attacker to execute arbitrary shell commands while a user is running a service...

CVE-2021-34794

A vulnerability in the Simple Network Management Protocol version 3 SNMPv3 access control functionality of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to query SNMP data. This vulnerability is due t...

PT-2021-4723 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Simple Network Management Protocol version 3 SNMPv3...

CVE-2021-33903

In LCOS 10.40 to 10.42.0473-RU3 with SNMPv3 enabled on LANCOM devices, changing the password of the root user via the CLI does not change the password of the root user for SNMPv3 access. However, changing the password of the root user via LANconfig does change the password of the root user for...

CVE-2021-1623

A vulnerability in the Simple Network Management Protocol SNMP punt handling function of Cisco cBR-8 Converged Broadband Routers could allow an authenticated, remote attacker to overload a device punt path, resulting in a denial of service DoS condition. This vulnerability is due to the punt path...

Cisco IOS XE Software 资源管理错误漏洞

Cisco IOS XE Software is an operating system from the U.S. company Cisco Cisco. Used as a single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity.Cisco IOS XE Software has a denial of service vulnerability...

Virgin Media Super Hub 3 安全漏洞

Virgin Media O2 Virgin Media Super Hub 3 is the offering smart WiFi from Virgin Media O2 in the UK. The Virgin Media Super Hub 3 suffers from a security vulnerability that stems from the fact that because their SNMP commands do not have adequate protection mechanisms, JavaScript and DNS rebinding...

Device42 Remote Collector 操作系统命令注入漏洞

Device42 Remote Collector is a virtual appliance from Device42, Inc. that facilitates SNMP, IPMI, hypervisor, and other auto-discovery across a network, requiring only https access and no need to open a large number of ports across network segments. A security vulnerability exists in Device42...

Cisco Firepower Threat Defense Software SNMP DoS (cisco-sa-ftd-snmp-dos-R8ENPbOs)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the Simple Network Management Protocol SNMP input packet processor that could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly. The...

CVE-2021-33539

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web...

CVE-2021-33539

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web...

ansible: user data leak in snmp_facts module

A flaw was found in ansible. The 'authkey' and 'privkey' credentials are disclosed by default and not protected by nolog feature when using the snmpfacts module. Attackers could take advantage of this information to steal the SNMP credentials. The highest threat from this vulnerability is to data...

多款 Siemens 设备缓冲区错误漏洞

Siemens SIMATIC is a configuration software from Siemens. A denial of service vulnerability exists in multiple Siemens products. The vulnerability originates from specially crafted packets sent to port 161/UDP and can be exploited by an attacker to cause the SNMP service on the affected device to...

PT-2021-17889 · Stormshield · Stormshield Sns

Name of the Vulnerable Software and Affected Versions: Stormshield SNS versions prior to 3.7.18 Stormshield SNS versions prior to 3.11.6 Stormshield SNS versions prior to 4.1.6 Description: The issue is related to a memory-management defect in the SNMP plugin, which can cause excessive consumptio...

Stormshield Network Security 资源管理错误漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network Security has a security vulnerability that can be exploited by an attacker to trigger a denial of service via a fatal error via Stormshield Network Security's SNMP...

net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

PT-2021-1919 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: The issue is related to insufficient access control in the Local Packet Transport Services LPTS component of the SNMP protocol in Cisco IOS XR Software. This could allow a...

Cisco IOS XR 安全漏洞

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. A vulnerability exists in the Cisco IOS XR software in the SNMP Management Panel with Access Control Error vulnerability. The vulnerability is due to incorrect LPTS programming when...