7681 matches found
CVE-2019-16651
An issue was discovered on Virgin Media Super Hub 3 based on ARRIS TG2492 devices. Because their SNMP commands have insufficient protection mechanisms, it is possible to use JavaScript and DNS rebinding to leak the WAN IP address of a user if they are using certain VPN implementations, this would...
CVE-2021-38412
Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...
Authentication flaw
Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...
CVE-2021-38412
CVE-2021-38412 affects Digi PortServer TS 16 Rack. The issue is improper authentication: properly formatted POST requests to multiple resources on the HTTP/HTTPS web servers do not require authentication tokens, enabling an attacker to enable SNMP and manipulate community strings for control. Aff...
CVE-2021-38412 Digi PortServer TS 16 Improper Authentication
Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...
CVE-2021-41315
The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...
Design/Logic Flaw
The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...
CVE-2021-41315
The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...
CVE-2021-41315
Device42 Remote Collector prior to version 17.05.01 is vulnerable to a command-injection in the SNMP Connectivity utility due to unsanitized user input. An authenticated attacker with access to the console application can execute arbitrary OS commands and escalate privileges. Remediation per conn...
PT-2021-22116 · Digi · Digi Portserver Ts 16 Rack
Name of the Vulnerable Software and Affected Versions: Digi PortServer TS 16 Rack device affected versions not specified Description: The issue concerns the Digi PortServer TS 16 Rack device, where properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers do not...
CVE-2021-41315: Improper Neutralization of Special Elements used in an OS Command
The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...
PT-2021-23270
Name of the Vulnerable Software and Affected Versions Device42 Remote Collector versions prior to 17.05.01 Description The issue allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges due to the lack of user input...
CVE-2021-38412: Improper Authentication
Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...
Digi PortServer TS 访问控制错误漏洞
Digi PortServer TS is used by Digital Networks Malaysia Digi for easy serial to Ethernet connectivity. An Access Control Error vulnerability exists in Digi PortServer TS 16, which stems from properly formatted POST requests for multiple resources on the software's HTTP and HTTPS web servers that ...
PT-2021-8991
Name of the Vulnerable Software and Affected Versions Virgin Media Super Hub 3 based on ARRIS TG2492 devices affected versions not specified Description An issue was discovered in the Virgin Media Super Hub 3 devices, where the SNMP commands have insufficient protection mechanisms. This allows fo...
EFI Fiery Detection (SNMP)
SNMP based detection of EFI Fiery. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.146701";...
EFI Fiery Detection Consolidation
Consolidation of EFI Fiery detections. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute i...
LibreNMS Cross-Site Scripting Vulnerability (CNVD-2021-93896)
LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool. a stored cross-site scripting vulnerability exists in API access pages in versions of LibreNMS prior to 21.3.0. The vulnerability stems from insufficient validation of the $api-description variable. An attacker could use this...
net-snmp:snmp_api_fuzzer: Crash with empty stacktrace
Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5383470403158016 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpapifuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: UNKNOWN...
PT-2021-27725
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves the snmp add var function in the snmp api fuzzer.c file. No information i...