CVE-2022-2323

CVE-2022-2323 affects SonicWall Switch versions 1.1.1.0-2s and earlier. The root cause is improper neutralization of special elements in user input, leading to remote code execution on the host when exploited by an authenticated attacker. The Post-Authenticated RCE is described in SonicWall PSIRT...

CVE-2022-2323

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions...

PT-2022-15909 · Sonicwall · Sonicwall Switch

Name of the Vulnerable Software and Affected Versions: SonicWall Switch versions 1.1.1.0-2s and earlier Description: The issue allows an authenticated malicious user to perform remote code execution in the host system due to improper neutralization of special elements used in a user input...

CVE-2022-2225

By using warp-cli subcommands disable-ethernet, disable-wifi, it was possible for a user without admin privileges to bypass configured Zero Trust security policies e.g. Secure Web Gateway policies and features such as 'Lock WARP switch'...

CVE-2022-2225

By using warp-cli subcommands disable-ethernet, disable-wifi, it was possible for a user without admin privileges to bypass configured Zero Trust security policies e.g. Secure Web Gateway policies and features such as 'Lock WARP switch'...

Cloudflare WARP 安全漏洞

Cloudflare WARP Cloudflare Vpn is a client application for secure connections from the US company Cloudflare. A security vulnerability exists in Cloudflare WARP. An attacker can exploit this vulnerability to bypass configured zero-trust security policies e.g., Secure Web Gateway policy and featur...

Cisco Small Business Buffer Overflow Vulnerability

Cisco Small Business is a switch from Cisco, U.S.A. A buffer overflow vulnerability exists in Cisco Small Business RV110W, RV130, RV130W, RV215W Routers, which stems from insufficient validation of user fields in incoming HTTP packets. An attacker could use this vulnerability to execute arbitrary...

Siemens SCALANCE X Switch Devices Buffer Copy Without Checking Size of Input (CVE-2022-26648)

A vulnerability has been identified in SCALANCE X200-4P IRT All versions, SCALANCE X200-4P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X202-2IRT All versions, SCALANC...

Siemens SCALANCE X Switch Devices Buffer Copy Without Checking Size of Input (CVE-2022-26649)

A vulnerability has been identified in SCALANCE X200-4P IRT All versions, SCALANCE X200-4P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X202-2IRT All versions, SCALANC...

Siemens SCALANCE X Switch Devices Use of Insufficiently Random Values (CVE-2022-26647)

A vulnerability has been identified in SCALANCE X200-4P IRT All versions, SCALANCE X200-4P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X202-2IRT All versions, SCALANC...

CVE-2022-32985

libnxapl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201...

CVE-2022-32985

libnxapl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201...

SonicWALL Switch 命令注入漏洞

SonicWALL Switch is a switch from SonicWALL, Inc. An input validation error vulnerability exists in SonicWALL Switch versions prior to 1.2.0.0-3, which stems from insufficient validation of user-supplied input and can be exploited by a remote attacker to execute arbitrary code on the device...

SonicWall Switch Post-Authenticated Remote Code Execution

A vulnerability in SonicWall Switch 1.1.1.0-2s and earlier allows an authenticated malicious user to perform remote code execution in the host system. CVE: CVE-2022-2323 Last updated: July 15, 2022, 4:11 p.m...

Siemens SCALANCE X Switches has an unspecified vulnerability

A security vulnerability exists in Siemens SCALANCE X Switches, an industrial Ethernet switch product from Siemens, Germany, which could be exploited by a remote, unauthenticated attacker to brute-force session IDs and hijack existing sessions...

Siemens SCALANCE X Switches Buffer Overflow Vulnerability (CNVD-2022-51438)

Siemens SCALANCE X Switches, an industrial Ethernet switch product from Siemens, Germany, is vulnerable to a buffer overflow vulnerability that could be exploited by an unauthenticated attacker to crash the affected device...

The vulnerability of the Ethernet switch Bosch PRA-ES8P2S web server allows attackers to increase their privileges.

The vulnerability of the Bosch PRA-ES8P2S Ethernet switch web server is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to escalate their privileges remotely...

The vulnerability of the DA50N network switch’s web interface allows a intruder to gain unauthorized access to protected information.

The vulnerability of the DA50N network switch web interface is related to insufficient protection of registration data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of the DA50N network switch web interface allows a hacker to gain full access to the device.

The vulnerability of the DA50N network switch web interface is related to weak password requirements. Exploiting this vulnerability can allow a remote attacker to gain full access to the device...

The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S, related to deficiencies in access control, allows attackers to bypass existing security restrictions and elevate their privileges to the root level.

The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and elevate their privileges to the root level...