CVE-2021-21507

CVE-2021-21507 affects Dell EMC Networking X-Series firmware versions before 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware before 2.0.0.82. The root cause is weak password encryption leading to potential disclosure of certain user credentials. An unauthenticated remote attacker could...

Dell EMC Networking X-Series 加密问题漏洞

The DELL Dell EMC Networking X-Series is an X-Series Ethernet switch from Dell USA. A security vulnerability exists in various Dell products, which can be exploited by remote attackers to potentially cause the disclosure of certain user credentials. The following products and versions are affecte...

Weak Password Vulnerability in the Switch Centralized Management Platform of Beijing Wenwang Yilian Technology Co.

Beijing WENNET YILIAN Technology Co., Ltd. is a high-tech software enterprise. A weak password vulnerability exists in the switch centralized management platform of Beijing WENET YILIAN Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information...

Sipwise C5 NGCP CSC Multiple Stored/Reflected XSS Vulnerabilities

Summary Sipwise C5 also known as NGCP - the Next Generation Communication Platform is a SIP-based Open Source Class 5 VoIP soft-switch platform that allows you to provide rich telephony services. It offers a wide range of features e.g. call forwarding, voicemail, conferencing etc. that can be...

Sipwise C5 NGCP CSC CSRF Click2Dial Exploit

Summary Sipwise C5 also known as NGCP - the Next Generation Communication Platform is a SIP-based Open Source Class 5 VoIP soft-switch platform that allows you to provide rich telephony services. It offers a wide range of features e.g. call forwarding, voicemail, conferencing etc. that can be...

Sipwise C5 NGCP CSC Cross Site Request Forgery

Sipwise C5 NGCP CSC CSRF Click2Dial Exploit Vendor: Sipwise GmbH Product web page: https://www.sipwise.com Affected version: =CEm39.3.1 NGCP wwwadmin version 3.6.7 Summary: Sipwise C5 also known as NGCP - the Next Generation Communication Platform is a SIP-based Open Source Class 5 VoIP soft-swit...

SUSE: Security Advisory (SUSE-SU-2018:1530-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Weak password vulnerability in H3C s1526 switch

H3C S1526 switch is a Layer 2 wire-speed Ethernet switching product independently developed by H3C Communication Technology Co., Ltd. and is an intelligent switch designed for network environments that require high performance and easy installation. A weak password vulnerability exists in the H3C...

Weak Password Vulnerability in H3C Switch S5120-28P-HPWR-SI Management Platform

Xinhua San Technologies Co., Ltd. has a full range of overall digital infrastructure capabilities in computing, storage, networking, 5G, security, etc., and provides one-stop digital solutions including cloud computing, big data, artificial intelligence, industrial internet, information security,...

Huawei S9306 suffers from weak password vulnerability

The S9306 is a routing switch, POE switch. Huawei S9306 has a weak password vulnerability. An attacker uses the weak password to log into the backend and obtain sensitive information...

PT-2021-8277 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the usb: dwc3: core: Do core softreset when switch mode in the Linux kernel. According to the programming guide, to switch mode for DRD controller, the driver...

CVE-2021-0242

A vulnerability due to the improper handling of direct memory access DMA buffers on EX4300 switches on Juniper Networks Junos OS allows an attacker sending specific unicast frames to trigger a Denial of Service DoS condition by exhausting DMA buffers, causing the FPC to crash and the device to...

CVE-2021-21507

Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure...

The vulnerability of NETGEAR GS808E switch’s microprogramming software, related to the lack of protection for service data, allows a intruder to trigger a maintenance failure.

The vulnerability of NETGEAR GS808E switch microprogramming software is related to the lack of protection for service data. Exploiting this vulnerability could allow an intruder to cause a service failure...

openvswitch: use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action

Open vSwitch aka openvswitch has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

Multiple Huawei CloudEngine Products Duplicate Release Pointer Vulnerability

Huawei CloudEngine 12800 and others are products of Huawei, China.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch.Huawei Cloudengine 6800 is a 6800 series data center switch. A duplicate pointer release vulnerability exists...

华为多款产品资源管理错误漏洞

Huawei CloudEngine 6800 and others are products of Huawei, China.CloudEngine 6800 is a 6800 series 10 Gigabit Ethernet switch for data centers.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch. A pointer double-release...

Weak Password Vulnerability in Huawei S5720 Switch Management Page

Founded in 1987, Huawei is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in the management page of Huawei S5720 switch. An attacker can use the weak password to log into the backend and obtain sensitive...

UAF vulnerability in multiple Huawei products

Huawei S2700, etc. are products of Huawei, China.S2700 is an enterprise switch.USG9500 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a...