Cisco 7000 Series IP Camera Memory Leak Vulnerability

The Cisco 7000 Series IP cameras are 5 megapixel, high definition, outdoor fixed dome cameras in vandal resistant enclosures with pan/tilt/zoom functionality.The Cisco 7000 Series IP camera implementation of Link Layer Discovery Protocol LLDP in firmware versions prior to 2.12.4 is vulnerable to ...

Broadcom MediaxChange Vulnerability Affecting Cisco Products: July 2021

A vulnerability in the TrustZone implementation in certain Broadcom MediaxChange firmware was reported by security researchers. To exploit this vulnerability on the affected Cisco products, the attacker would need to dismount the backplate of the device and trigger a specific series of impulses o...

NSClient++ 0.5.2.35 Remote Code Execution Exploit

This Metasploit module allows an attacker with knowledge of the admin password of NSClient++ to start a privileged shell. For this module to work, both web interface of NSClient++ and ExternalScripts feature should be enabled. This module requires Metasploit: https://metasploit.com/download Curre...

NSClient++ 0.5.2.35 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NSClient++ 0.5.2.35 - ExternalScripts Authenticated Remote Code Execution', 'Description' = %q This module allows an attacker with knowledge of t...

SUSE: Security Advisory (SUSE-SU-2014:0541-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : opera (openSUSE-2021-829)

This update for opera fixes the following issues : Update to version 76.0.4017.154 - CHR-8420 Update chromium on desktop-stable-90-4017 to 90.0.4430.212 - DNA-92411 Bookmarks breadcrumbs wrong color when pressed in dark mode - DNA-92587 Sync settings: Use old password button doesnt work - DNA-926...

openSUSE Security Update : opera (openSUSE-2021-828)

This update for opera fixes the following issues : Update to version 76.0.4017.154 - CHR-8420 Update chromium on desktop-stable-90-4017 to 90.0.4430.212 - DNA-92411 Bookmarks breadcrumbs wrong color when pressed in dark mode - DNA-92587 Sync settings: Use old password button doesnt work - DNA-926...

Cisco FXOS Software Unidirectional Link Detection DoS / Code Execution (cisco-sa-nxos-udld-rce-xetH6w35)

An arbitrary code execution or denial of service DoS vulnerability exists in Unidirectional Link Detection UDLD feature of Cisco FXOS Software due to insufficient input validation. An unauthenticated, adjacent attacker can exploit this issue by sending crafted Cisco UDLD protocol packets to a...

Cisco NX-OS Software Unidirectional Link Detection DoS / Code Execution (cisco-sa-nxos-udld-rce-xetH6w35)

An arbitrary code execution or denial of service DoS vulnerability exists in Unidirectional Link Detection UDLD feature of Cisco NX-OS Software due to insufficient input validation. An unauthenticated, adjacent attacker can exploit this issue by sending crafted Cisco UDLD protocol packets to a...

Cisco Firepower 2100 Series SSL/TLS Inspection DoS (cisco-sa-ftd-ssl-dcrpt-dos-RYEkX4yy)

According to its self-reported version, the SSL/TLS inspection of Cisco Firepower Threat Defense FTD Software for Cisco Firepower 2100 Series firewalls is affected by denial of service vulnerability due to improper input validation for certain fields of specific SSL/TLS messages. An...

Cisco Firepower Threat Defense Software TCP Flood DoS (cisco-sa-ftd-tcp-dos-GDcZDqAf)

According to its self-reported version, the packet processing functionality of Cisco Firepower Threat Defense FTD Software is affected by TCP flood denial of service vulnerability due to inefficient memory management. An unauthenticated, remote attacker can exploit this by sending a large number ...

CVE-2021-1513

The CVE-2021-1513 vulnerability affects Cisco SD-WAN Software’s vDaemon process. It allows an unauthenticated, remote attacker to trigger a device reload and DoS via crafted malformed packets sent to an affected device. Impact is a denial of service with potential device reloads; available metric...

Cisco SD-WAN vEdge Buffer Overflow Vulnerability (CNVD-2021-37680)

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. A buffer overflow vulnerability exists in the forwarding error correction of the Cisco SD-WAN vEdge, which can be exploited by an attacker to cause the...

Cisco SD-WAN 缓冲区错误漏洞

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. A buffer overflow vulnerability exists in the forwarding error correction of the Cisco SD-WAN vEdge, which can be exploited by an attacker to cause the...

CVE-2021-1513

A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service DoS condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this...

Cisco Firepower Threat Defense Software SSL Decryption Policy DoS (cisco-sa-ftd-ssl-decrypt-dos-DdyLuK6c)

According to its self-reported version, Cisco FTD Software is affected by a denial of service DoS vulnerability in its SSL/TLS handler component due to insufficient validation of of SSL/TLS messages. An unauthenticated, remote attacker can exploit this issue to trigger a reload of an affected...

CVE-2021-1501

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

CVE-2021-1402

A vulnerability in the software-based SSL/TLS message handler of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to insufficient validati...

Input validation

A vulnerability in the software-based SSL/TLS message handler of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to insufficient validati...

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software SIP Denial of Service Vulnerability

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition. The...