CVE-2018-6766

CVE-2018-6766 affects Swisscom TVMediaHelper 1.1.0.50. The vulnerability arises from the handling of multiple DLLs (dwmapi.dll, PROPSYS.dll, cscapi.dll, SAMLIB.dll, netbios.dll, winhttp.dll, security.dll, ntmarta.dll, WindowsCodecs.dll, apphelp.dll) loaded by SwisscomTVMediaHelper.exe, allowing a...

CVE-2018-6765

Swisscom MySwisscomAssistant 2.17.1.1065 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing...

CVE-2018-6765

CVE-2018-6765 affects Swisscom MySwisscomAssistant 2.17.1.1065. The vulnerability is due to DLL loading handling: multiple DLLs (dwmapi.dll, IPHLPAPI.DLL, WindowsCodecs.dll, RpcRtRemote.dll, CRYPTSP.dll, rasadhlp.dll, DNSAPI.dll, ntmarta.dll, netbios.dll, olepro32.dll, security.dll, winhttp.dll, ...

CVE-2018-6766

Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that coul...

CVE-2018-6765: Uncontrolled Search Path Element

Swisscom MySwisscomAssistant 2.17.1.1065 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing...

CVE-2018-6766: Uncontrolled Search Path Element

Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that coul...

PT-2018-17723

Name of the Vulnerable Software and Affected Versions Swisscom TVMediaHelper version 1.1.0.50 Description The issue exists due to the way .dll files are loaded by the SwisscomTVMediaHelper.exe process, specifically with the handling of several DLLs such as dwmapi.dll, PROPSYS.dll, cscapi.dll,...

Authorization

Authorization Bypass in the Web interface of Arcadyan SLT-00 Star aka Swisscom Internet-Box devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, leading to denial of service and information disclosure...

CVE-2016-10042

Authorization Bypass in the Web interface of Arcadyan SLT-00 Star aka Swisscom Internet-Box devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, leading to denial of service and information disclosure...

CVE-2016-10042

The Arcadyan SLT-00 Star* (Swisscom Internet-Box) Web UI contains an authorization bypass (CVE-2016-10042) that allows unauthenticated HTTP requests to reconfigure the static routing table, enabling denial of service and information disclosure. Affected: Arcadyan SLT-00 Star* devices prior to R7....

Swisscom Internet-Box Authentication Bypass Vulnerability

Swisscom Internet-Box is a router from Arcadyan. An authentication bypass vulnerability exists in the web interface of the Arcadyan SLT-00 Star also known as Swisscom Internet-Box, which can be exploited by an attacker to cause a denial of service and information disclosure through unauthorized...

Security Analyst Summit 2017 Day Two Recap

SINT MAARTEN—Mike Mimoso and Chris Brook recap the second day of Kaspersky Lab’s Security Analyst Summit, including how a Brazilian bank was compromised, a talk by Swisscom’s Markus Neis, and David Jacoby and Frans Rosen’s Hacking for Humanity talk. Download:...

CVE-2016-0761 Docker Image Host Files Corruption | Cloud Foundry

CVE-2016-0761 Docker Image Host Files Corruption Critical Vendor Cloud Foundry Foundation Description Garden linux contains a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other container...

CVE-2015-1834 - Path Traversal Vulnerability | Cloud Foundry

CVE-2015-1834 – Path Traversal Vulnerability Moderate Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v208 Description A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller. Path traversal is the ‘outbreak’ of a given director...

CVE-2015-1188

The certificate verification functions in the HNDS service in Swisscom Centro Grande ADB DSL routers with firmware before 6.14.00 allows remote attackers to access the management functions via unknown vectors...

Design/Logic Flaw

The certificate verification functions in the HNDS service in Swisscom Centro Grande ADB DSL routers with firmware before 6.14.00 allows remote attackers to access the management functions via unknown vectors...

CVE-2015-1188

The CVE-2015-1188 issue affects Swisscom Centro Grande (ADB) DSL routers with firmware

CVE-2015-1188

The certificate verification functions in the HNDS service in Swisscom Centro Grande ADB DSL routers with firmware before 6.14.00 allows remote attackers to access the management functions via unknown vectors...

CVE-2015-1188: Undefined Security Weakness

The certificate verification functions in the HNDS service in Swisscom Centro Grande ADB DSL routers with firmware before 6.14.00 allows remote attackers to access the management functions via unknown vectors...

Swisscom Centro Grande DSL Router HNDS Service Certificate Validation Failure Validation Bypass Vulnerability

Swisscom Centro Grande DSL Router is a router device. A flaw in the Swisscom Centro Grande DSL Router HNDS service allows remote attackers to bypass the authentication mechanism and gain unauthorized access to the device by failing to properly validate the certificate...