CVE-2021-1543

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

CVE-2021-1541

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

Cisco Small Business 220 Series Smart Switches 跨站脚本漏洞

Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco. A cross-site scripting vulnerability exists in the Cisco Small Business 220 Series Smart Switches, which originates from a vulnerability in the web management interface of the Cisco Small Business 220 Series...

Cisco Small Business 200 Series Managed Switches 跨站脚本漏洞

Cisco Small Business 200 Series Managed Switches is a 200 Series managed switch from Cisco, Inc. A cross-site scripting vulnerability exists in Cisco Small Business 220 Series Smart Switches, which stems from improperly checking the value of a parameter on an affected page. An attacker could use...

Cisco Small Business 220 Series Smart Switches 授权问题漏洞

The Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco. An authorization issue vulnerability exists in the web-based management interface of the Cisco Small Business 220 Series Smart Switches that could allow an unauthenticated, remote attacker to bypass...

CVE-2021-28801

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

CVE-2021-28805

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

Code injection

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

CVE-2021-28805

CVE-2021-28805 affects QNAP QSS on certain QSW switches: QSW-M2108-2C/2S and QSW-M2108R-2C (pre-1.0.3 build 20210505) and QSW-M408 (pre-1.0.12 build 20210506). Root cause: inclusion of sensitive information in the QSS source code, enabling attackers to read application data. Impact is defined in ...

CVE-2021-28801

CVE-2021-28801 describes an out-of-bounds read in QNAP QSS on certain QSW-M2108-2C/2S/2C-RV switches. Affected versions are QSS before 1.0.2 build 20210122 for QSW-M2108-2C, QSW-M2108-2S, and QSW-M2108R-2C. The vulnerability could allow an attacker to read sensitive information from the system. P...

CVE-2021-28801 Out-of-Bounds Read Vulnerability in QSS

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

CVE-2021-28801

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

QNAP Switch System 缓冲区错误漏洞

QNAP Systems QSS is an unmanaged switch from China Weilian QNAP Systems. A security vulnerability exists in the QNAP Switch System QSS that originates from an out-of-bounds read. An attacker could exploit the vulnerability to read sensitive information on the system. The following products and...

CVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

CVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2020-1968 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a Raccoon attack in the TLS specification. B...

HPESBST04140 rev.3 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v9.0.1b, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, User Validation Failure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 32Gb Fibre Channel SAN Switch for HPE Synergy - Prior to 9.0.1b HPE B-series SN6700B Fibre Channel Switch - Prior to...

ArubaOS-CX < 10.04.3031 Memory Corruption (ARUBA-PSA-2020-009)

The version of ArubaOS-CX installed on the remote host is prior to version 10.04.3031. Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of...

ArubaOS-CX < 10.04.2000 Memory Corruption (ARUBA-PSA-2020-009)

The version of ArubaOS-CX installed on the remote host is prior to version 10.04.2000. Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of...

CVE-2021-22731

Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM and MCSESP V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a remote attacker...