CVE-2017-12299

A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to...

CVE-2017-12299

The CVE-2017-12299 entry describes a vulnerability in Cisco ASA Next-Generation Firewall Services where the process of creating default IP blocks during device initialization can allow an unauthenticated, remote attacker to reach the device’s local IP address and bypass filters that are supposed ...

How Next-Generation Firewall Platforms Help Protect Your Perimeter at Each Stage of the Cyber Kill Chain*

Whether you need to upgrade your firewalls on-premise or in the cloud, next-generation firewalls NGFWs can significantly reduce the risks associated with the modern threat landscape. Since attacks have evolved using techniques such as encryption, polymorphism, etc., firewalls have also evolved to...

CVE-2017-12299: Improper Input Validation

A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to...

PT-2017-12474

Name of the Vulnerable Software and Affected Versions Cisco ASA Next-Generation Firewall Services affected versions not specified Description A vulnerability exists in the process of creating default IP blocks during device initialization that could allow an unauthenticated, remote attacker to se...

Command Injection Vulnerability in Multiple Cisco Products

Cisco Unified Computing System UCS Manager is a set of embedded device management software. Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Cisco Firepower 9300 Security Appliance are firewall devices. Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Cisco Firepower 930...

Command Injection Vulnerability in Multiple Cisco Products

The Cisco Firepower 4100 Series Next-Generation Firewall NGFW and the Cisco Firepower 9300 Security Appliance are security appliances from Cisco.Smart Licensing Smart Licensing Manager service is one of the license smart management service. A command injection vulnerability exists in the Smart...

CVE-2017-12277: Improper Input Validation

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability i...

CVE-2017-12243: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command Injection. The...

Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Command Injection Vulnerability

A vulnerability in the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device. The vulnerability is due to imprope...

Windows Defender Exploit Guard: 攻撃表面を縮小して次世代型マルウェアに対抗する

本記事は、Windows Security のブログ “Windows Defender Exploit Guard: Reduce the attack surface against next-generation malware” 2017 年 10 月 23 日 米国...

PT-2017-3408

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager affected versions not specified Cisco Firepower 4100 Series Next-Generation Firewall NGFW affected versions not specified Cisco Firepower 9300 Security Appliance affected versions not specified...

CVE-2017-1169

IBM DOORS next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188...

CVE-2017-1169

IBM DOORS next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188...

CVE-2017-1169

IBM DOORS next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188...

CVE-2017-1169

CVE-2017-1169 affects IBM Rational DOORS Next Generation (DNG/RRC). The issue is a cross-site scripting vulnerability in the Web UI that allows an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The IBM Security Bulletin enumerates a...

CVE-2017-1169: Improper Neutralization of Input During Web Page Generation

IBM DOORS next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188...

PT-2017-12179

Name of the Vulnerable Software and Affected Versions IBM DOORS next Generation DNG/RRC affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within...

CVE-2017-12245

CVE-2017-12245 describes a memory-consumption DoS vulnerability in Cisco Firepower Threat Defense (FTD) Software’s SSL traffic decryption. Root cause: an error in how the Firepower Detection Snort Engine handles SSL traffic decryption and communicates with the ASA handler, enabling an unauthentic...

Ransomware Roundup: Alternative Techniques featuring CTB-Faker

Ransomware is innovating to spread faster, hit harder and increase its payout potential. New unknown variants pop up daily, and many leverage non-malware techniques to evade traditional defenses. CTB-Faker is a perfect example of how modern ransomware is leveraging these new techniques to easily...