Cisco IOS and IOS XE Proxy Certificate Validation Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A certificate validation vulnerability exists in the Cisco Network Plug-and-Play PnP agent in Cisco IOS and IOS XE, which stems from the program's failure to adequately validate certificates, and can b...

CVE-2019-1748

CVE-2019-1748 affects Cisco IOS Software and Cisco IOS XE Software with the Network Plug-and-Play (PnP) agent. The root cause is insufficient certificate validation, allowing an unauthenticated, remote attacker to present a crafted certificate and perform man-in-the-middle attacks to decrypt/modi...

Cisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation Vulnerability

A vulnerability in the Cisco Network Plug-and-Play PnP agent of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability exists because the affected software insufficiently validates certificates...

PT-2019-15162 · Cisco · Cisco Network Plug-And-Play +2

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Cisco Network Plug-and-Play PnP agent could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive...

CVE-2018-16195

Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows an attacker on the same network segment to execute arbitrary OS commands via SOAP interface of UPnP...

Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie

A group of hackers has hijacked tens of thousands of Google's Chromecast streaming dongles, Google Home smart speakers and smart TVs with built-in Chromecast technology in recent weeks by exploiting a bug that's allegedly been ignored by Google for almost five years. The attackers, who go by...

Denial of Service Vulnerability in H3C ER2100n

The H3C ER2100n is an enterprise-class router. A denial of service vulnerability exists in the H3C ER2100n. All UPnP methods of the router can be accessed without authorization. When the input parameter of the UPnP method contains the character "\x00", the UPnP service will crash, and a manual...

Cisco IOS Software and IOS XE Software Memory Disclosure Vulnerability

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. A memory leak vulnerability exists in the Network Plug and Play agent in Cisco IOS Software and IOS XE Software, which arises from a failure of an affected device to properly validate...

CVE-2018-15377

A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient...

CVE-2018-15377

A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient...

CVE-2018-0463

A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to gain unauthorized access to configuration data that is stored on an affected NSO system. The vulnerability exists because the Network...

Input validation

A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient...

CVE-2018-0463

CVE-2018-0463 describes a vulnerability in the Cisco Network Plug and Play server component of Cisco NSO. The issue stems from incomplete validation when NSO is configured to use Secure Unique Device Identifier (SUDI) authentication, allowing an unauthenticated, remote attacker to gain unauthoriz...

CVE-2018-15377

Cisco IOS and IOS XE Software Plug and Play (Open Plug-n-Play) agent has a memory-leak vulnerability caused by insufficient input validation. An unauthenticated, remote attacker can send invalid data to the Plug and Play agent, potentially causing a memory leak and device reload. Affected: Cisco ...

Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak Vulnerability

A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient...

Time-out error occurs when you install a Windows Update package that contains drivers on a computer that is running Windows 7 or Windows Server 2008 R2

Time-out error occurs when you install a Windows Update package that contains drivers on a computer that is running Windows 7 or Windows Server 2008 R2 Symptoms Consider the following scenario: You try to install a Windows Update package that is marked as Important on a computer that is running...

Cisco Network Services Orchestrator Network Plug and Play server component privilege access control vulnerability

Cisco Network Services Orchestrator NSO is the United States Cisco Cisco company's set of network automation service solutions. network Plug and Play server is one of the network plug and play server components. A privilege access control vulnerability exists in the Network Plug and Play server...

Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability

A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to gain unauthorized access to configuration data that is stored on an affected NSO system. The vulnerability exists because the Network...

D-Link DIR-615 Cross-Site Scripting Vulnerability (CNVD-2018-16522)

D-Link DIR-615 is a small wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-615 version 20.07. A remote attacker can exploit this vulnerability by leveraging the 'description' field in the AddPortMapping UPnP SOAP request to inject JavaScript...

Microsoft Windows: Audit PNP Activity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpnpactivity.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit PNP Activity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...