Privilege escalation

Windows Point-to-Point Protocol over Ethernet PPPoE Elevation of Privilege Vulnerability...

Remote code execution

Windows Point-to-Point Protocol over Ethernet PPPoE Remote Code Execution Vulnerability...

CVE-2023-23414

CVE-2023-23414 is a Windows PPPoE Remote Code Execution vulnerability. The CVSS 3.1 base score is 7.1 (HIGH) with Adjacent attack vector, high attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability (all high). Exploitation...

CVE-2023-23414 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

...

CVE-2023-23414 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

...

CVE-2023-23407 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

...

CVE-2023-23407

CVE-2023-23407 : Windows PPPoE remote code execution affecting the PPPoE stack. According to the CVE record, the vulnerability enables total impact on confidentiality, integrity, and availability (CVSS 3.1: 7.1, HIGH). Exploitation is classified as adjacent network access with high complexity and...

CVE-2023-23407 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

...

CVE-2023-23385 Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

...

CVE-2023-23385 Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

...

CVE-2023-23385

Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

...

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

...

KB5023752: Windows Server 2012 Security Update (March 2023)

The remote Windows host is missing security update 5023752. It is, therefore, affected by multiple vulnerabilities - Internet Control Message Protocol ICMP Remote Code Execution Vulnerability CVE-2023-23415 - Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2023-21708,...

KLA48554 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...

KLA48553 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service, bypass security restrictions. Below is a complete list of...

SUSE CVE-2004-0564

Roaring Penguin pppoe rp-ppoe, if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root." Therefore this...

CVE-2022-45511

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the PPPOEPassword parameter of /goform/QuickIndex...

Cisco IOS XR Software Broadband Network Gateway PPP over Ethernet DoS (cisco-sa-iosxr-bng-Gmg5Gxt)

A denial of service DoS vulnerability exists in IOS XR Software due to the PPPoE feature not properly handling an error condition within a specific crafted packet sequence. An unauthenticated, adjacent attacker can exploit this issue, via a sequence of specific PPPoE packets from controlled...