269 matches found
CVE-2021-1378
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...
Race condition
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...
CVE-2021-1378 Cisco StarOS Denial of Service Vulnerability
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...
Cisco StarOS Denial of Service Vulnerability
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...
CVE-2021-1378
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...
CVE-2021-1378: Uncontrolled Resource Consumption
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...
PT-2021-2149
Name of the Vulnerable Software and Affected Versions Cisco StarOS affected versions not specified Description A vulnerability in the SSH service could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition...
CVE-2019-11862
The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying...
Code injection
The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying...
CVE-2019-11862
The CVE affects the ALEOS SSH service prior to 4.12.0, 4.9.5, and 4.4.9, where the SSH service allows traffic proxying. The provided data includes CVSSv3.1 metrics (AV:L, AC:L, PR:N, UI:N, S:U; C/H/I/H/A/H; base 8.4) and CVSSv2 metrics (base 4.6) indicating HIGH impact on confidentiality, integri...
PT-2020-9221
Name of the Vulnerable Software and Affected Versions ALEOS versions prior to 4.12.0 ALEOS versions prior to 4.9.5 ALEOS versions prior to 4.4.9 Description The issue allows traffic proxying through the SSH service. Recommendations For versions prior to 4.12.0, update to version 4.12.0 or later...
CVE-2019-11862: Undefined Security Weakness
The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying...
CVE-2020-5763
Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt...
CVE-2020-5763
Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt...
PT-2020-18684
Name of the Vulnerable Software and Affected Versions Grandstream HT800 series firmware version 1.0.17.5 and below Description The issue concerns a backdoor in the SSH service, allowing an authenticated remote attacker to obtain a root shell by correctly answering a challenge prompt...
CVE-2020-5763: Active Debug Code
Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt...
CVE-2020-1616 JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service.
Due to insufficient server-side login attempt limit enforcement, a vulnerability in the SSH login service of Juniper Networks Juniper Advanced Threat Prevention JATP Series and Virtual JATP vJATP devices allows an unauthenticated, remote attacker to perform multiple login attempts in excess of th...
PT-2020-4093
Name of the Vulnerable Software and Affected Versions: Juniper Networks JATP and vJATP versions prior to 5.0.6.0 Description: The issue is related to insufficient server-side login attempt limit enforcement in the SSH login service, allowing an unauthenticated, remote attacker to perform multiple...
CVE-2020-8994
An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing the UART interface and then they can read Wi-Fi SSID or password, read the dialogue text files between users and XIAOMI AI speaker, use Text-To-Speech tools pretend XIAOMI...
PT-2020-20415
Name of the Vulnerable Software and Affected Versions XIAOMI AI speaker MDZ-25-DT versions 1.34.36 through 1.40.14 Description An issue was discovered in the XIAOMI AI speaker, allowing attackers to gain root shell access by exploiting the UART interface. This access enables them to read Wi-Fi SS...