Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. OpenSSL is used by IBM Robotic Process Automation as part of the API Server CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286. Golang Go is used by IBM Robotic Process Automation as part of...

Mitsubishi Electric Corporation MELSEC iQ-F FX5U MELSOFT Direct memory corruption vulnerability

Talos Vulnerability Report TALOS-2023-1727 Mitsubishi Electric Corporation MELSEC iQ-F FX5U MELSOFT Direct memory corruption vulnerability May 26, 2023 CVE Number CVE-2023-1424 SUMMARY A memory corruption vulnerability exists in the MELSOFT Direct functionality of Mitsubishi Electric Corporation...

CVE-2023-25596

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network...

CVE-2023-25596

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network...

Design/Logic Flaw

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network...

CVE-2023-25596 Authenticated Sensitive Information Disclosure in ClearPass Policy Manager

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network...

CVE-2023-25596

CVE-2023-25596 affects Aruba ClearPass Policy Manager. Multiple sources describe an authenticated attacker with administrative privileges able to access sensitive information in cleartext via the web management interface, with potential to facilitate further access to network services. The Connec...

PT-2023-20187 · Aruba Networks · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: A vulnerability exists in ClearPass Policy Manager that allows an attacker with administrative privileges to access sensitive information in a cleartext format. This could...

CVE-2022-47456

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

The vulnerability of the NETCONF protocol implementation in the Cisco Network Services Orchestrato (NSO) software solution allows a hacker to elevate their privileges to the root level in the system and cause service failures.

The vulnerability of the NETCONF protocol implementation in the Cisco Network Services Orchestrator NSO software lies in incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root...

CVE-2023-20040

A vulnerability in the NETCONF service of Cisco Network Services Orchestrator NSO could allow an authenticated, remote attacker to cause a denial of service DoS on an affected system that is running as the root user. To exploit this vulnerability, the attacker must be a member of the admin group...

Siemens SINEC INS Command Injection Vulnerability

SINEC INS Infrastructure Network Services is a web-based application that combines various network services in a single tool. This simplifies the installation and management of all network services related to industrial networks.A command injection vulnerability exists in Siemens SINEC INS, which...

Siemens SINEC INS Path Traversal Vulnerability

SINEC INS Infrastructure Network Services is a web-based application that combines various network services in a single tool. This simplifies the installation and management of all network services related to industrial networks.A path traversal vulnerability exists in Siemens SINEC INS, which...

Cisco Network Services Orchestrator 代码问题漏洞

Cisco Network Services Orchestrator NSO is a network automation services solution from Cisco. A security vulnerability exists in Cisco Network Services Orchestrator NSO that stems from incorrect validation of user-supplied input, resulting in a denial of service...

Cisco Network Services Orchestrator Path Traversal Vulnerability

A vulnerability in the RESTCONF and NETCONF services of Cisco Network Services Orchestrator NSO could allow an authenticated, remote attacker to cause a denial of service DoS on an affected system that is running as the root user. To exploit this vulnerability, the attacker must be a member of th...

PT-2023-1106 · Cisco · Cisco Network Services Orchestrator

Name of the Vulnerable Software and Affected Versions: Cisco Network Services Orchestrator NSO affected versions not specified Description: A vulnerability in the NETCONF service could allow an authenticated, remote attacker to cause a denial of service DoS on an affected system running as the ro...

Siemens SINEC NMS 路径遍历漏洞

SINEC INS Infrastructure Network Services is a web-based application that combines various network services in a single tool. This simplifies the installation and management of all network services related to industrial networks.A path traversal vulnerability exists in Siemens SINEC INS, which...

CVE-2022-44443

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services...

UNISOC chipset 安全漏洞

UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in network services, which could lead to a local privilege escalation that requires system execution privileges...

UNISOC chipset 安全漏洞

UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in network services, which could lead to a local privilege escalation that requires system execution privileges...