CVE-2021-41003

Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series...

CVE-2021-41001

An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine NAE in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch...

CVE-2021-41000

Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch...

PT-2022-11349 · Aruba · Aos-Cx +7

Name of the Vulnerable Software and Affected Versions: Aruba CX 6200F Switch Series versions 10.06.xxxx through 10.06.0170 and below Aruba 6300 Switch Series versions 10.06.xxxx through 10.06.0170 and below, 10.07.xxxx through 10.07.0050 and below, 10.08.xxxx through 10.08.1030 and below Aruba 64...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit one of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA encourages...

HPESBNW04259 rev.2 - HPE Aruba 4100i, 6100, 6200, 6300, 6400, 8320, 8325, 8360, and 8400 Model Switches, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Unauthenticated Arbitrary Code Execution; Remote: Arbitrary Command Execution, Denial of Service DoS, Directory Traversal, Unauthorized Disclosure of Information, script injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are...

CVE-2022-20623 Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability

A vulnerability in the rate limiter for Bidirectional Forwarding Detection BFD traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. This vulnerability is due to a logic error ...

CVE-2022-20623

Cisco NX-OS for Nexus 9000 Series is affected by CVE-2022-20623 due to a logic error in the Bidirectional Forwarding Detection (BFD) rate limiter. An unauthenticated, remote attacker can send a crafted traffic stream to cause BFD traffic drops and BFD session flaps, leading to route instability a...

Cisco NX-OS Software Security Vulnerabilities

Cisco NX-OS Software is a suite of data center-grade operating system software used by Cisco switches. A security vulnerability exists in Cisco NX-OS Software for Cisco Nexus 9000 Series Switches, which originates from a logic error in the BFD Rate Limiter feature. An attacker could exploit this...

CVE-2022-20623: Undefined Security Weakness

A vulnerability in the rate limiter for Bidirectional Forwarding Detection BFD traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. This vulnerability is due to a logic error ...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod Multi-Site TCP DoS (cisco-sa-n9kaci-tcp-dos-YXukt6gM)

According to its self-reported version, Cisco NX-OS System Software in ACI Mode is affected by a denial of service vulnerability. The vulnerability exists in Application Centric Infrastructure ACI mode of Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches. ...

HPESBST04254 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.0.1b and v7.4.1d, Disclosure of Privileged Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN6000B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN3600B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN4000B SAN Extension Switch...

TFTP-client Arbitrary Command Execution

The vulnerability of the TFTP-client software for Zyxel GS1900 and XGS1210 series switch devices is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary OS commands via the graphical interface...

Brocade Fabric OS Trust Management Vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. Brocade Fabric OS suffers from a trust management issue vulnerability that can be exploited by an attacker to bypass Brocade Fabric OS restrictions by hard-coding credential...

Moxa MGate Memory Release DoS

The vulnerability of the microprogrammed industrial Ethernet switches Moxa MGate 5109 and Moxa MGate 5101-PBM-MN lies in a memory release error. Exploiting this vulnerability can allow an attacker to cause service failure remotely...

CVE-2021-22814

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists which could cause arbritrary script execution when a malicious file is read and displayed. Affected Products: 1-Phase Uninterruptible Power Supply UPS using NMC2 including Smart-UPS,...

CVE-2021-22814

CVE-2021-22814 describes a Cross-site Scripting (CWE-79) vulnerability in Schneider Electric NMC embedded devices (NMC2 and NMC3) that can cause arbitrary script execution when a malicious file is read and displayed. Affected products span multiple Schneider Electric lines: 1-phase and 3-phase UP...

CVE-2021-22813

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to an edit policy file. Affected Products:...

CVE-2021-22811

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted. Affected Products: 1-Phase Uninterruptible Power Supply UP...

CVE-2022-22174

A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and eventual Denial of Service DoS condition. Once the condition occurs, further packet processin...