Rockwell Automation Stratix and ArmorStratix Switches < 15.3 IOS SNMP Remote Code Execution (ICSA-17-208-04)

Binary data 720289.prm...

Denial of Service Vulnerability in MOXA EtherDevice Switch EDS Series Switches

MOXA EtherDevice Switch EDS series is a series of industrial switches introduced by Moxa. A denial of service vulnerability exists in the MOXA EtherDevice Switch EDS Series switches. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2019-1977 Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning Vulnerability

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an endpoint device in certain circumstances. The...

CVE-2019-1977

CVE-2019-1977 affects Cisco Nexus 9000 Series switches running in Application Centric Infrastructure (ACI) mode. The flaw is in Endpoint Learning: when packets arrive on a port from outside the ACI fabric and are destined for an endpoint on a border leaf with Disable Remote Endpoint Learning enab...

Cisco Patches Six Critical Bugs in UCS Gear and Switches

Cisco Systems is warning of six critical vulnerabilities impacting a wide range of its products, including its Unified Computing System server line and its small business 220 Series Smart switches. In all instances of the vulnerabilities, a remote unauthenticated attacker could take over targeted...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS Uncontrolled Resource Consumption

Binary data 720280.prm...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS Resource Management Errors and Improper Input Validation

Binary data 720279.prm...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2019-27702)

SCALANCE SC firewall is used to protect trusted industrial networks from untrusted networks. It allows input and output network connections to be filtered in different ways.SCALANCE X switches a are used to connect industrial components such as programmable logic controllers PLCs or human machine...

ICSA-19-225-03_Siemens SCALANCE X Switches (Update D)

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE X switches Vulnerability: Insufficient Resource Pool 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-19-225-03 Siemens SCALANCE...

Cisco Adaptive Security Appliance - Path Traversal Exploit

Exploit for hardware platform in category web applications require 'msf/core' class MetasploitModule "Cisco Adaptive Security Appliance - Path Traversal", 'Description' = %q Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 A security vulnerability in Cisco ASA that would allow an...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

CVE-2019-1914

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

CVE-2019-1913

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

CVE-2019-1913

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

Input validation

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

Authorization

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management interface. An attacker could exploit this...

CVE-2019-1913 Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

CVE-2019-1913

Cisco Small Business 220 Series Smart Switches are affected by CVE-2019-1913, a remote code execution vulnerability in the web management interface. The issue stems from insufficient validation of user input and improper boundary checks when reading data into an internal buffer, allowing an unaut...

CVE-2019-1913 Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

CVE-2019-1914

CVE-2019-1914 affects Cisco Small Business 220 Series Smart Switches. It is a command-injection vulnerability in the web management interface caused by insufficient validation of user-supplied input. An authenticated attacker with a valid login (privilege level 15) could send a malicious request ...