CVE-2021-38412 Digi PortServer TS 16 Improper Authentication

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...

CVE-2021-41315

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...

Design/Logic Flaw

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...

CVE-2021-41315

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...

CVE-2021-41315

Device42 Remote Collector prior to version 17.05.01 is vulnerable to a command-injection in the SNMP Connectivity utility due to unsanitized user input. An authenticated attacker with access to the console application can execute arbitrary OS commands and escalate privileges. Remediation per conn...

PT-2021-22116 · Digi · Digi Portserver Ts 16 Rack

Name of the Vulnerable Software and Affected Versions: Digi PortServer TS 16 Rack device affected versions not specified Description: The issue concerns the Digi PortServer TS 16 Rack device, where properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers do not...

CVE-2021-41315: Improper Neutralization of Special Elements used in an OS Command

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...

CVE-2021-38412: Improper Authentication

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...

PT-2021-23270

Name of the Vulnerable Software and Affected Versions Device42 Remote Collector versions prior to 17.05.01 Description The issue allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges due to the lack of user input...

Digi PortServer TS 访问控制错误漏洞

Digi PortServer TS is used by Digital Networks Malaysia Digi for easy serial to Ethernet connectivity. An Access Control Error vulnerability exists in Digi PortServer TS 16, which stems from properly formatted POST requests for multiple resources on the software's HTTP and HTTPS web servers that ...

PT-2021-8991

Name of the Vulnerable Software and Affected Versions Virgin Media Super Hub 3 based on ARRIS TG2492 devices affected versions not specified Description An issue was discovered in the Virgin Media Super Hub 3 devices, where the SNMP commands have insufficient protection mechanisms. This allows fo...

EFI Fiery Detection (SNMP)

SNMP based detection of EFI Fiery. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.146701";...

EFI Fiery Detection Consolidation

Consolidation of EFI Fiery detections. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute i...

LibreNMS Cross-Site Scripting Vulnerability (CNVD-2021-93896)

LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool. a stored cross-site scripting vulnerability exists in API access pages in versions of LibreNMS prior to 21.3.0. The vulnerability stems from insufficient validation of the $api-description variable. An attacker could use this...

net-snmp:snmp_api_fuzzer: Crash with empty stacktrace

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5383470403158016 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpapifuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: UNKNOWN...

PT-2021-27725

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves the snmp add var function in the snmp api fuzzer.c file. No information i...

net-snmp:snmp_api_fuzzer: Crash in snmp_add_var

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5402726234718208 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpapifuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

PT-2021-27720

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash type has been identified. The crash state involves the snmp add var function, as indicated by the snmp api fuzzer.c...

net-snmp:snmp_api_fuzzer: Heap-buffer-overflow in snmp_add_var

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6017372729769984 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpapifuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in get_token

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5855065276547072 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpmibfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Stack-buffer-overfl...