Dataprobe iBootBar Authorization Vulnerability

Dataprobe iBootBar is a remote power management solution from Dataprobe USA that provides serial ports, optional internal modem and DTMF audio dialing control. A security vulnerability exists in Dataprobe iBootBar using firmware version 2007-09-20. A remote attacker can exploit this vulnerability...

CVE-2007-6760

Dataprobe iBootBar with 2007-09-20 and possibly later beta firmware allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCCOOKIE cookie...

Authentication flaw

Dataprobe iBootBar with 2007-09-20 and possibly later beta firmware allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCCOOKIE cookie...

CVE-2007-6759

Dataprobe iBootBar with 2007-09-20 and possibly later released firmware allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie...

Authentication flaw

Dataprobe iBootBar with 2007-09-20 and possibly later released firmware allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie...

CVE-2007-6760

Dataprobe iBootBar with 2007-09-20 and possibly later beta firmware allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCCOOKIE cookie...

CVE-2007-6759

Dataprobe iBootBar (firmware 2007-09-20 and possibly later) is affected by CVE-2007-6759, enabling remote authentication bypass and power-cycle attacks on connected devices via a DCRABBIT cookie. The available sources describe the vulnerability and impact (authentication bypass, device reboot/pow...

CVE-2007-6759

Dataprobe iBootBar with 2007-09-20 and possibly later released firmware allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie...

CVE-2007-6760

Dataprobe iBootBar is affected: on devices running 2007-09-20 beta firmware (and possibly later), remote attackers can bypass authentication and trigger power-cycle actions on connected devices via a DCCOOKIE cookie. The issue is documented across multiple sources (NVD/CNVD/PRION/CVELIST) with hi...

CVE-2007-6760: Improper Authentication

Dataprobe iBootBar with 2007-09-20 and possibly later beta firmware allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCCOOKIE cookie...

PT-2017-4611

Name of the Vulnerable Software and Affected Versions: Dataprobe iBootBar with 2007-09-20 and possibly later released firmware Description: The issue allows remote attackers to bypass authentication and conduct power-cycle attacks on connected devices via a DCRABBIT cookie. Recommendations: For t...

CVE-2007-6759: Improper Authentication

Dataprobe iBootBar with 2007-09-20 and possibly later released firmware allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie...

PT-2017-4612

Name of the Vulnerable Software and Affected Versions: Dataprobe iBootBar with 2007-09-20 and possibly later beta firmware Description: The issue allows remote attackers to bypass authentication and conduct power-cycle attacks on connected devices via a DCCOOKIE cookie. Recommendations: For...

Denial of Service Vulnerability in Schneider M218 TCP/IP Stack

The Modicon M218 is a compact programmable logic controller manufactured by Schneider Electric of France. A denial of service vulnerability exists in the Schneider Electric M218 TCP/IP stack, where an IP message with an abnormal IP header 0 in the IPTotalLength field and 6 in the IPProtocol field...

HP Photosmart B210 printer SMB server buffer overflow vulnerability

Overview The HP Photosmart B210 printer utilizes an SMB server for managing the print queue. An invalid SMB packet may cause a denial of service condition, requiring the printer to be restarted. Description Fuzzing the first 296 bytes of an SMB packet may in some cases cause a denial of service...

Intel InBusiness eMail Station 1.4.87 Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1844/info A buffer overflow exists in the Intel InBusiness eMail Station, a dedicated email device. When attempting to establish a connection, the username submitted to the device is not properly filtered for length. By...

Canon Wireless Printer Denial Of Service

The HTTP management interface on several models of Canon Wireless printers allows for a Denial of Service DoS condition via a crafted HTTP request. Note: if this module is successful, the device can only be recovered with a physical power cycle. Module Options msf use...

Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)

Wyse - Machine Remote Power Off Denial of Service Metasploit require 'msf/core' class Metasploit3 'Wyse Machine Remote Power off DOS', 'Description' = %q This module exploits the Wyse Rapport Hagent service and cause remote power cycle Power off the wyse machine remotely. , 'Stance' =...

Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)

require 'msf/core' class Metasploit3 'Wyse Machine Remote Power off DOS', 'Description' = %q This module exploits the Wyse Rapport Hagent service and cause remote power cycle Power off the wyse machine remotely. , 'Stance' = Msf::Exploit::Stance::Aggressive, 'Author' = '[email protected]',...

CISCO as5350 crashes with nmap connect scan

I have managed to "reduplicate" at least five times the following scenario with a cisco as5250, with firmwrare 12.2 11t release firmware of cisco: nmap -dinsane -p 1-65535 ip.of.as5350 This causes a "hard" lockup, and the device must be powered off in order to have functionality restored to it...