Impact of Rapid Reset and HTTP/2 DoS Vulnerabilities (CVE-2023-44487, CVE-2023-35945)

The Palo Alto Networks Product Security Assurance team is evaluating the recently disclosed denial-of-service DoS vulnerabilities in the HTTP/2 protocol including Rapid Reset CVE-2023-44487 and CVE-2023-35945. If HTTP/2 inspection is enabled in PAN-OS, an ongoing distributed denial-of-service DDo...

F5 Networks BIG-IP : Intel BIOS vulnerability (K000137202)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000137202 advisory. Improper initialization in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially...

Juniper Junos OS Vulnerability (JSA73147)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73147 advisory. - An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon mgd process of Juniper Networks Junos OS and Junos OS...

Juniper Junos OS Vulnerability (JSA73141)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73141 advisory. - A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the...

Juniper Junos OS Multiple Vulnerabilities (JSA73162)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA73162 advisory. - An Improper Check for Unusual or Exceptional Conditions in the Packet Forwarding Engine pfe of Juniper Networks Junos OS Evolved on PTX10003 Series allows an...

Siemens SINEC NMS Cross-Site Scripting Vulnerability

Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. A cross-site scripting vulnerability exists in the Siemens SINEC NMS...

Juniper Networks Junos OS Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS. An attacker could exploit the vulnerability to...

PT-2023-6304 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.4R3-S5 Juniper Networks Junos OS version 21.1 versions prior to 21.1R3-S4 Juniper Networks Junos OS version 21.2 versions prior to 21.2R3-S4 Juniper Networks Junos OS version 21.3 versions prior ...

Juniper Networks Junos OS Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that stems from a misauthorization vulnerability in CP packet...

Juniper Networks Junos OS and Junos OS Evolved Security Vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

Juniper Networks Junos OS Evolved Access Control Error Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to bypass MAC address checking, allowing MAC addresses that are not intended to reach neighbori...

Juniper Networks Junos OS Evolved Information Disclosure Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to view passwords provided on the CLI command line...

Juniper Junos OS Vulnerability (JSA73156)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73156 advisory. - An Improper Input Validation vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause memory...

PT-2023-6307 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S5 Junos OS versions prior to 21.1R3-S4 Junos OS versions prior to 21.2R3-S4 Junos OS versions prior to 21.3R3-S3 Junos OS versions prior to 21.4R3-S2 Junos OS versions prior to 22.1R2-S2, 22.1R3 Junos OS...

Juniper Junos OS Vulnerability (JSA73155)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73155 advisory. - An Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of...

PT-2023-6331 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.4R3-S7 Juniper Networks Junos OS versions 21.1 prior to 21.1R3-S5 Juniper Networks Junos OS versions 21.2 prior to 21.2R3-S5 Juniper Networks Junos OS versions 21.3 prior to 21.3R3-S4 Juniper...

F5 Networks BIG-IP : Intel BIOS vulnerability (K000137204)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000137204 advisory. - Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to...

Juniper Junos OS Vulnerability (JSA73165)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73165 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows a network-based,...

Juniper Junos OS Vulnerability (JSA73172)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73172 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series allows a unauthenticate...

CVE-2023-5499

Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to retrieve all the week's logs stored in the 'log2' directory. An attacker could retrieve sensitive information such as remembered wifi networks, sent messages, SOS device locatio...