SNMP location XSS vulnerability

Description By including some HTML in the "Location" field of the snmpd configuration of a managed device, an attacker can inject HTML into the LibreNMS "Devices" tab, which then gets rendered when the page is viewed. EDIT: I'm having difficulties developing a proper exploit for this beyond the...

Schneider Electric Modicon Improper Privilege Management (CVE-2022-0222)

A CWE-269: Improper Privilege Management vulnerability exists that could cause a denial of service of the Ethernet communication of the controller when sending a specific request over SNMP. Affected products: Modicon M340 CPUsBMXP34 versions prior to V3.40, Modicon M340 X80 Ethernet Communication...

CVE-2022-46670

Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an...

Cross site scripting

Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an...

CVE-2022-46670

CVE-2022-46670 affects Rockwell Automation MicroLogix 1100 and 1400 controllers. It is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The exploit chain described shows the payload is transferred over SNMP and rendered on the homepage, potentially enabling ...

CVE-2022-46670 Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack

Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an...

CVE-2022-46670: Improper Neutralization of Input During Web Page Generation

Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an...

SUSE-SU-2022:4205-2 Security update for net-snmp

This update for net-snmp fixes the following issues: Updated to version 5.9.3 bsc1201103, jscSLE-11203: - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access. - CVE-2022-24809: Fixed a malformed OID in a GET-NEXT ...

PT-2022-27942 · Allen Bradley · Micrologix 1400 +1

Name of the Vulnerable Software and Affected Versions: MicroLogix 1100 and 1400 controllers affected versions not specified Description: The issue is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver of the controllers. This may allow an attacker to accomplish...

CVE-2022-45315

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to execute arbitrary code via a crafted packet...

Out-of-bounds

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows attackers to execute arbitrary code via a crafted packet...

CVE-2022-45315

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to execute arbitrary code via a crafted packet...

CVE-2022-45315: Out-of-bounds Read

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to execute arbitrary code via a crafted packet...

CVE-2022-45315

CVE-2022-45315 affects MikroTik RouterOS prior to stable v7.6. Root cause is an out-of-bounds read in the SNMP processing path, enabling remote attackers to execute arbitrary code via a crafted SNMP packet. Documents consistently describe the vulnerable component as the SNMP process within Router...

CVE-2022-44363

Tenda i21 V1.0.0.144656 is vulnerable to Buffer Overflow via /goform/setSnmpInfo...

CVE-2022-44363

Tenda i21 V1.0.0.144656 is vulnerable to Buffer Overflow via /goform/setSnmpInfo...

Tenda i21 缓冲区错误漏洞

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version V1.0.0.144656, which originates from vulnerability to /goform/setSnmpInfo buffer overflow...

Schneider Electric Product Authorization Issue Vulnerability

The Schneider Electric Modicon M340 is a mid-range PLC Programmable Logic Controller for industrial processes and infrastructures from Schneider Electric France. An authorization issue vulnerability exists in the Schneider Electric product that stems from the presence of improper privilege...

SUSE SLED15: libsnmp40 / libsnmp40-32bit / net-snmp / net-snmp-devel / etc (SUSE-SU-2022:4205-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4205-1 advisory. Updated to version 5.9.3 bsc1201103, jscSLE-11203: - CVE-2022-24805: Fixed a buffer overflow in...

SUSE: Security Advisory (SUSE-SU-2022:4205-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...