Open Networking Foundation ONOS security vulnerabilities

Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1, which stems from the fact that ONOS will modify...

CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Code injection

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2022-14470 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is caused by a logic error in the code, allowing a possible way to connect to an open network bypassing the DISALLOW CONFIG WIFI restriction in Settings. This could lead to local escalation o...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android version 13, which stems from a logic error in the Settings code that can bypass the DISALLOWCONFIGWIFI restriction to connect to an open network, which can be exploited by a...

DEBIAN-CVE-2021-37964

Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attacker with a rogue wireless access point to to potentially carryout a wifi impersonation attack via a crafted ONC file...

NFS ONCRPC XDR Driver Privilege Escalation

The vulnerability of services for the NFS ONCRPC XDR driver on Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

CVE-2021-36933

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...

CVE-2021-27392

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

CVE-2021-27392

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

CVE-2021-27392

Summary (CVE-2021-27392) : Siemens/Milestone Open Network Bridge (ONVIF) implementations across multiple versions (2018–2020 releases) store user credentials using a hard-coded cryptographic key. An authenticated remote attacker could retrieve and decrypt credentials stored on the ONVIF server vi...

CVE-2021-27392

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

CVE-2021-27392: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in Siveillance Video Open Network Bridge 2020 R3, Siveillance Video Open Network Bridge 2020 R2, Siveillance Video Open Network Bridge 2020 R1, Siveillance Video Open Network Bridge 2019 R3, Siveillance Video Open Network Bridge 2019 R2, Siveillance Video Open...

Siemens Siveillance Video Open Network Bridge (ONVIF) User Credentials Disclosure Vulnerability

Siveillance Video formerly known as Siveillance VMS is an IP video management software.The Siveillance Video product portfolio consists of four editions, Siveillance Video Core, Core Plus, Advanced, and Pro, which address the specific needs of small to medium-sized solutions to large, complex...

PT-2021-7804

Name of the Vulnerable Software and Affected Versions Siveillance Video Open Network Bridge versions 2018 R2 through 2020 R3 Description A vulnerability has been identified in Siveillance Video Open Network Bridge, where affected Open Network Bridges store user credentials for authentication...

Siemens Open Network Bridge Trust Management Vulnerability

Siveillance Video formerly known as Siveillance VMS is an IP video management software.The Siveillance Video product portfolio consists of four editions, Siveillance Video Core, Core Plus, Advanced, and Pro, which address the specific needs of small to medium-sized solutions to large, complex...

Siemens and Milestone Siveillance Video Open Network Bridge

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens and Milestone Equipment: Siveillance Video Open Network Bridge ONVIF Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Unspecified Vulnerability in Juniper Networks Junos Space and Security Director

Juniper Networks Junos Space and Junos Space Security Director are both products of Juniper Networks, U.S.A. Juniper Networks Junos Space is a network management solution. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their...

ONAP Logging Access Control Error Vulnerability

ONAP Logging is a logger in the ONAP network management system from the ONAP project. An access control error vulnerability exists in ONAP Logging Dublin and previous versions. An attacker can exploit this vulnerability to gain full privileges to the ONAP service without authentication via ports...