Lucene search
K

144 matches found

CNNVD
CNNVD
added 2021/08/20 12:0 a.m.3 views

NetModule Router Software 安全漏洞

NetModule Router Software is a router from NetModule. A security vulnerability exists in NetModule Router Software versions prior to 4.3.0.113, 4.4.0.111, and 4.5.0.105. No further information on this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

7.5CVSS7.3AI score0.00978EPSS
Exploits3References3
CNNVD
CNNVD
added 2021/08/20 12:0 a.m.4 views

NetModule Router Software 日志信息泄露漏洞

NetModule Router Software is a router for NetModule. A security vulnerability exists in NetModule Router Software due to the interface support for an optional "CLI-PHP" feature, which is essentially a PHP webshell that requires The vulnerability stems from the interface supporting an optional...

8.8CVSS7.9AI score0.01481EPSS
Exploits3References4
BDU FSTEC
BDU FSTEC
added 2021/06/25 12:0 a.m.2 views

The vulnerability of Huawei’s microprogrammed router software arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Huawei’s microprogrammed router software exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by the system...

6.8CVSS5.5AI score0.00563EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.1 views

The vulnerability of Huawei’s microprogrammed router software, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.00883EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.1 views

The vulnerability of Huawei’s microprogrammed router software, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.00883EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.1 views

The vulnerability of Huawei’s microprogrammed router software, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.00883EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.3 views

The vulnerability of Huawei’s microprogrammed router software, related to authentication errors, allows attackers to escalate their privileges, execute arbitrary code, or cause service failures.

The vulnerability of Huawei’s microprogrammed router software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges, execute arbitrary code, or cause service failures...

9.8CVSS8.1AI score0.00876EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.2 views

The vulnerability of the file checking function of Cisco IOS XR routers from Network Convergence System’s 540 Series and Cisco 8000 Series allows a hacker to execute arbitrary code.

The vulnerability of the file checking function for Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 8000 Series is related to errors in the cryptographic signature verification. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

6.8CVSS6.9AI score0.00204EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.2 views

The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web-based management interfaces for microprogramming software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is caused by buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

10CVSS7.8AI score0.02194EPSS
Exploits0References2
CNVD
CNVD
added 2020/09/25 12:0 a.m.1 views

Cisco IOS XE Denial of Service Vulnerability (CNVD-2020-70971)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the IP Address Resolution Protocol ARP feature of Cisco IOS XE used by Cisco ASR 1000 Series Converged Services Routers. The...

7.4CVSS6.6AI score0.00424EPSS
Exploits0References1
OSV
OSV
added 2020/09/24 6:15 p.m.3 views

CVE-2020-3513

Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services Routers with a Route Switch Processor 3 RSP3 installed could allow an authenticated, local attacker with high privileges to execute...

6.7CVSS7.2AI score0.00318EPSS
Exploits0References1
OSV
OSV
added 2020/09/24 6:15 p.m.1 views

CVE-2020-3465

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload. The vulnerability is due to incorrect handling of certain valid, but not typical, Ethernet frames. An attacker could exploit this vulnerability by sending the Ethernet frames on...

6.5CVSS6.9AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2020/09/24 12:0 a.m.4 views

PT-2020-4430 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web management framework of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, remote attacker...

8.5CVSS8.2AI score0.009EPSS
Exploits0References4
The Hacker News
The Hacker News
added 2020/09/01 7:39 a.m.61 views

Cisco Issues Warning Over IOS XR Zero-Day Flaw Being Targeted in the Wild

Cisco has warned of an active zero-day vulnerability in its router software that's being exploited in the wild and could allow a remote, authenticated attacker to carry out memory exhaustion attacks on an affected device. "An attacker could exploit these vulnerabilities by sending crafted IGMP...

8.6CVSS0.7AI score0.03959EPSS
Exploits0
NCSC
NCSC
added 2020/08/31 12:0 a.m.5 views

Vulnerability fixed in Cisco IOS XR

Cisco has fixed a vulnerability in the Distance Vector Multicast Routing Protocol DVMRP functionality in IOS XR. The vulnerability allows an unauthenticated remote malicious person able to cause a Denial-of-Service on the vulnerable device. To do so, the malicious party needs to send rogue IGMP...

8.6CVSS6.8AI score0.03959EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.2 views

The vulnerability of Huawei’s microprogrammed router software, related to authentication deficiencies, allows attackers to execute arbitrary commands.

The vulnerability of Huawei’s microprogrammed router software is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

5.6CVSS7.8AI score0.00806EPSS
Exploits0References3
OSV
OSV
added 2020/06/03 6:15 p.m.0 views

CVE-2020-3212

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker could exploit this...

7.2CVSS6.1AI score0.02584EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.14 views

The vulnerabilities of the microprogrammed software of ZyXEL routers of the USG, UAG, ATP, VPN, and NXC series allow attackers to cause service failures or gain unauthorized access to protected information.

The vulnerability of microprogrammed ZyXEL routers of the USG, UAG, ATP, VPN, and NXC series is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain unauthorized access to protected information...

9.4CVSS5.5AI score
Exploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.3 views

The vulnerability of Huawei’s microprogrammed router software arises from insufficient validation of input data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Huawei’s microprogrammed router software exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.00764EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.1 views

The vulnerability of the HNAP strncmp component in the microprogramming software for wireless routers from D-Link, such as the D-Link DIR-867-US, D-Link DIR-878, and D-Link DIR-882-US, allows a hacker to alter the administrator password.

The vulnerability of the HNAP strncmp component in microprogrammed software for D-Link wireless routers such as D-Link DIR-867-US, D-Link DIR-878, and D-Link DIR-882-US is related to errors in handling empty passwords. Exploiting this vulnerability could allow a remote attacker to change the...

8.8CVSS7.7AI score0.80221EPSS
Exploits0References4Affected Software3
Rows per page
Query Builder