CVE-2024-40992

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder length checking for UD request packets According to the IBA specification: If a UD request packet is detected with an invalid length, the request shall be an invalid request and it shall be silently droppe...

CVE-2024-40992 RDMA/rxe: Fix responder length checking for UD request packets

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder length checking for UD request packets According to the IBA specification: If a UD request packet is detected with an invalid length, the request shall be an invalid request and it shall be silently droppe...

CVE-2024-40992

The CVE-2024-40992 entry concerns a Linux kernel RDMA/rxe issue where a UD (un-connected) queue pair length check was fixed. The root cause was a deferred responder length check in copy_data due to commit 689c5421bfe0, which could cause -EINVAL and make send_data_in return RESPST_ERR_MALFORMED_WQ...

OPENSUSE-SU-2024:11406-1 ssdp-responder-1.7-1.7 on GA media

These are all security issues fixed in the ssdp-responder-1.7-1.7 package on the GA media of openSUSE Tumbleweed...

The vulnerability in the web interface of the Cisco Emergency Responder, a server for managing and monitoring emergency calls, allows an attacker to gain read, modify, or delete access to data.

The vulnerability in the web interface of the Cisco Emergency Responder server for emergency response management and monitoring involves bypassing a relative path. Exploiting this vulnerability allows an attacker operating remotely to gain read, modify, or delete access to data...

The vulnerability in the web interface of the Cisco Emergency Responder, a server for managing and monitoring emergency calls, allows a attacker to perform a CSRF attack.

The vulnerability in the web interface of the Cisco Emergency Responder, a system for managing and monitoring emergency calls, is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack from a remote location...

Cisco Emergency Responder Multiple Vulnerabilities (cisco-sa-cem-csrf-suCmNjFr)

According to its self-reported version, Cisco Emergency Responder is affected by multiple vulnerabilities. - A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform arbitrary...

CVE-2024-20347

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affected system. An...

CVE-2024-20347

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affected system. An...

CVE-2024-20352

A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affecte...

CVE-2024-20352

A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affecte...

CVE-2024-20352

A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affecte...

CVE-2024-20352

A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affecte...

CVE-2024-20352

Cisco Emergency Responder is affected by CVE-2024-20352, a directory traversal flaw in the web UI that can let an authenticated, remote attacker perform arbitrary actions on the device with the user’s privileges, including accessing password/log files and uploading/deleting files. The issue arise...

CVE-2024-20347

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affected system. An...

CVE-2024-20347

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affected system. An...

Cisco Emergency Responder Cross-Site Request Forgery and Directory Traversal Vulnerabilities

Multiple vulnerabilities in Cisco Emergency Responder could allow an attacker to conduct a cross-site request forgery CSRF or directory traversal attack, which could allow the attacker to perform arbitrary actions on an affected device. For more information about these vulnerabilities, see the...

PT-2024-3800 · Cisco · Cisco Emergency Responder

Name of the Vulnerable Software and Affected Versions: Cisco Emergency Responder affected versions not specified Description: A vulnerability in the web UI of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack. This is due to insufficient protection...

PT-2024-3799 · Cisco · Cisco Emergency Responder

Name of the Vulnerable Software and Affected Versions: Cisco Emergency Responder affected versions not specified Description: A vulnerability in the web UI of Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack. This is due to insufficie...

Cisco Emergency Responder 安全漏洞

Cisco Emergency Responder is an emergency response framework from Cisco USA. A security vulnerability exists in Cisco Emergency Responder that stems from inadequate protection of the Web UI on affected systems...