Amazon Linux AMI : nss (ALAS-2018-1095)

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack.CVE-2018-12384 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : pam_pkcs11 (openSUSE-2018-1244)

This update for pampkcs11 provides the following fixes : Security issues fixed bsc1105012 : - Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability - Fixed a stack-based buffer overflow in opensshmapper.c - Make sure memory is properly cleaned before invoking free...

Command injection

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery...

CVE-2018-17903

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery...

CVE-2018-17903

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery...

CVE-2018-17903

CVE-2018-17903 affects SAGA1-L8B devices with firmware versions prior to A0.10. The vulnerability enables replay attacks and command forgery via the transmitter–receiver communication, potentially allowing remote attackers to issue forged commands. Impact is described as high (I:H) with both inte...

CVE-2018-17903

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery...

Security update for pam_pkcs11 (moderate)

This update for pampkcs11 fixes the following security issues: - It was possible to replay an authentication by using a specially prepared smartcard or token bsc1105012 - Prevent buffer overflow if a user has a home directory with a length of more than 512 bytes bsc1105012 - Memory not cleaned...

Security update for pam_pkcs11 (moderate)

This update for pampkcs11 provides the following fixes: Security issues fixed bsc1105012: - Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability - Fixed a stack-based buffer overflow in opensshmapper.c - Make sure memory is properly cleaned before invoking free Othe...

Command injection

All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...

CVE-2018-17935

All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...

CVE-2018-17935

All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...

CVE-2018-17935

CVE-2018-17935 affects Telecrane F25 Series remote controls prior to firmware 00.0A. The root cause is fixed, reproducible authentication codes used in transmitter-receiver communications, enabling an authentication bypass by capture-replay. This can allow unauthorized users to view and replay co...

CVE-2018-17935

All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...

Replay Attack

auth0 is vulnerable to replay attacks. The authentication renew request does not include a nonce, which would allow an attacker to replay an old renewAuth request to obtain a valid session...

Saga Radio SAGA1-L8B Replay Attack and Command Forgery Vulnerability

This vulnerability allows remote attackers to issue commands on vulnerable installations of Saga Radio equipment. Authentication is not required to exploit this vulnerability. The specific flaw exists with the communication between the transmitter and receiver pair. By using a fixed control code ...

Telecrane F25 Replay Attack Vulnerability

This vulnerability allows remote attackers to issue commands on vulnerable installations of Telecrane equipment. Authentication is not required to exploit this vulnerability. The specific flaw exists with the communication between the transmitter and receiver pair. By using a fixed control code a...

PT-2018-14255

Name of the Vulnerable Software and Affected Versions SAGA1-L8B versions prior to A0.10 Description The issue allows for a replay attack and command forgery. Recommendations For versions prior to A0.10, update the firmware to version A0.10 or later to resolve the issue...

GAIN Electronic Co. Ltd SAGA1-L Series Command Forgery Vulnerability

GAIN SAGA1-L Series is a SAGA1-L series industrial remote control product from GAIN Electronic. A security vulnerability exists in GAIN SAGA1-L Series products using firmware versions prior to A0.10. The vulnerability can be exploited by an attacker to perform replay attacks and forge commands...

CVE-2018-17935: Authentication Bypass by Capture-replay

All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...