CVE-2018-0002

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in...

Default Password and Remote Command Execution Vulnerabilities in ANYSEC Security Gateway by ZTE NetWizard

The ANYSEC-M6100 is a standard 1U rack mount VPN security access gateway. Default password and remote command execution vulnerabilities exist in the ANYSEC security gateway of ZKNETWAY, which allow attackers to log in to the backend, construct specific code, remotely execute commands, write...

Memory leak vulnerability in multiple Huawei firewall products

Huawei USG series products and Secospace USG series are Huawei's new generation of professional intrusion prevention and firewall products for customers in enterprises, IDCs, campus networks and carriers. A memory leakage vulnerability exists in several Huawei firewall products, which can be...

IKEv2 protocol memory out-of-bounds access vulnerability in multiple Huawei products (CNVD-2017-38286)

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...

Microsoft Office Word free macro command execution flaw vulnerability 0day-vulnerability warning-the black bar safety net

If we inform you that in MS-Word on the presence of a Royal Decree to fulfill the vulnerability flaws of the bug, which unnecessary any macro maybe memory overflow? Windows for use between the stop data transfer supply a variety of transmission methods, this one is called static swap agreements, ...

Sophos Astaro Security Gateway Remote Code Execution Vulnerability

The Sophos Astaro Security Gateway aka ASG is a gateway device from Sophos UK. A security vulnerability exists in Sophos ASG version 7. A remote attacker can exploit the vulnerability by sending a specially crafted request to the index.plx file to execute arbitrary code...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

Design/Logic Flaw

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-6315

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

CVE-2017-6315

CVE-2017-6315 affects Sophos Astaro Security Gateway (ASG) v7. It permits unauthenticated remote code execution by sending a crafted request to the index.plx file. Several connected sources (NVD/CVELIST entries and exploit/public details) corroborate unauthenticated RCE via index.plx, highlightin...

CVE-2017-6315: Improper Input Validation

Astaro Security Gateway aka ASG 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx...

PT-2017-16994

Name of the Vulnerable Software and Affected Versions Astaro Security Gateway aka ASG version 7 Description The issue allows remote attackers to execute arbitrary code via a crafted request to "index.plx". Recommendations For Astaro Security Gateway aka ASG version 7, consider restricting access ...

Astaro Security Gateway 7 Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE:...

Astaro Security Gateway 7 Remote Code Execution

!/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE: CVE-2017-6315 import socket import sys import os import...

Astaro Security Gateway 7 - Remote Code Execution

Astaro Security Gateway 7 - Remote Code Execution !/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE:...

CVE-2017-7928

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may...

Improper access control

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may...

CVE-2017-7928

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may...

CVE-2017-7928

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may...