Cisco RESTCONF API Detection

Binary data ciscoiosxerestconfdetect.nbin...

The vulnerability of the RESTCONF API application programming interface implementation of the SmartFabric OS10 network operating system allows a perpetrator to gain unauthorized access to the system.

The vulnerability of the RESTCONF API application programming interface of the SmartFabric OS10 network operating system is related to the possibility of bypassing authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the...

Design/Logic Flaw

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent...

CVE-2021-28507

The CVE-2021-28507 issue in Arista EOS concerns bypass of the service ACL for OpenConfig gNMI/gNOI (and OpenConfig RESTCONF) under certain conditions, causing denied requests to be forwarded to the agent. Affected product: Arista EOS with OpenConfig transport protocols. Root cause: service ACL by...

CVE-2021-28507 An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.

An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent...

Security Advisory 0071

Security Advisory 0071 . CSAF PDF Date: January 11th, 2022 Revision | Date | Changes ---|---|--- 1.0 | January 11th, 2022 | Initial release Security Advisory 0071 The CVE-ID tracking this issue: CVE-2021-28500 CVSSv3.1 Base Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H The CVE-ID tracki...

CVE-2021-36307

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system...

CVE-2021-36306

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system...

CVE-2021-36307

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system...

CVE-2021-36306

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system...

Privilege escalation

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system...

Authentication flaw

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system...

CVE-2021-36307

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system...

CVE-2021-36307

CVE-2021-36307 describes an elevation-of-privilege vulnerability in Dell Networking OS10 (Linux-based network switch OS) where a malicious low-privilege user with access to RESTCONF/API endpoints could obtain administrator privileges. Affected: OS10 versions prior to October 2021 with RESTCONF AP...

CVE-2021-36306

CVE-2021-36306 affects Dell Networking OS10, specifically versions prior to October 2021 with RESTCONF API enabled. The root cause is an authentication bypass in the RESTCONF interface, enabling a remote unauthenticated attacker to gain access and perform actions on the affected system. The conne...

CVE-2021-36307

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system...

CVE-2021-36306

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system...

The vulnerability in the implementation of authentication, authorization, and accounting functions for Cisco IOS XE operating systems allows a perpetrator to bypass the authentication process and trigger a service failure.

The vulnerability of the implementation of authentication, authorization, and accounting functions in Cisco IOS XE operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures and trigger service...

Cisco IOS XE Software NETCONF RESTCONF Authentication Bypass (cisco-sa-aaa-Yx47ZT8Q)

According to its self-reported version, Cisco IOS XE Software's authentication, authorization, and accounting AAA function is affected by a authentication bypass vulnerability. Therefore, it could allow an unauthenticated, remote attacker to bypass NETCONF or RESTCONF authentication and do any of...

Critical Cisco Bugs Allow Code Execution on Wireless, SD-WAN

Cisco is warning three critical security vulnerabilities affect its flagship IOS XE software, the operating system for most of its enterprise networking portfolio. The flaws impact Cisco’s wireless controllers, SD-WAN offering and configuration mechanisms in use for scads of products. The...