CVE-2020-7121

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP Link Layer Discovery Protocol process in the switch. This applies to...

CVE-2020-7121

Two memory corruption flaws affecting Aruba CX Switches (Series 6200F, 6300, 6400, 8320, 8325, 8400) are described. The root cause is memory corruption in the LLDP processing path, enabling local denial of service when exploiting the vulnerability. Impact is limited to the LLDP daemon on affected...

CVE-2020-7122

Aruba CX Switches Series (6200F, 6300, 6400, 8320, 8325, 8400) contain two memory‑corruption vulnerabilities that can lead to Local Denial of Service of the CDP (Cisco Discovery Protocol) process. Affected firmware versions are prior to 10.04.1000 (and, per Nessus, some variants relate to LLDP/10...

CVE-2020-7122

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP Cisco Discovery Protocol process in the switch. This applies to firmwa...

CVE-2019-15993

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could...

Design/Logic Flaw

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could...

CVE-2019-15993 Cisco Small Business Switches Information Disclosure Vulnerability

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could...

CVE-2019-15993 Cisco Small Business Switches Information Disclosure Vulnerability

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could...

CVE-2019-15993

CVE-2019-15993 affects Cisco Small Business Switches web UI, where insufficient authentication allows unauthenticated remote access to sensitive information (including configuration files) via crafted HTTP requests. Root cause: lack of proper authentication controls for web UI data. Affected: Cis...

CVE-2020-7122: Out-of-bounds Write

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP Cisco Discovery Protocol process in the switch. This applies to firmwa...

CVE-2020-7121: Out-of-bounds Write

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP Link Layer Discovery Protocol process in the switch. This applies to...

CVE-2019-15993: Improper Authentication

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could...

HPESBNW04040 rev.4 - Aruba CX Switches, Multiple Memory Corruption Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 6200F Switch Series 10.04.3030 and below for CVE-2020-7121, 10.04.1000 and below for CVE-2020-7122 Aruba 6300 Switch Series 10.04.3030 an...

PT-2020-6953 · Aruba · Aruba Cx Switches Series

Name of the Vulnerable Software and Affected Versions: Aruba CX Switches Series versions prior to 10.04.3021 Description: The issue is related to memory corruption vulnerabilities, specifically a buffer overflow, in the Aruba CX Switches Series. Successful exploitation could result in a Local...

PT-2020-6952 · Aruba · Aruba Cx Switches Series

Name of the Vulnerable Software and Affected Versions: Aruba CX Switches Series versions prior to 10.04.1000 Description: The issue is related to memory corruption vulnerabilities in the Aruba CX Switches Series, which could result in Local Denial of Service of the CDP process in the switch...

isf

This is an offensive tool for ICS exploitation. It is a Python-based framework for exploiting Industrial Control Systems ICS, similar to Metasploit. The framework, known as ICSSploit, is a fork of the routersploit project and is designed for ICS exploitation. It includes various modules for...

Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation (cisco-sa-n3n9k-priv-escal-3QhXJBC)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Enable Secret feature due to a logic error in the implementation of the enable command. An authenticated, local attacker can exploit this, by logging in to the device and issuing the enable command,...

Security Bulletin: OpenSSL (Publicly disclosed vulnerability) for IBM b-type switches and directors

Summary Fixes are released for OpenSSL Publicly disclosed vulnerability for IBM b-type switches and directors. Vulnerability Details CVEID: CVE-2019-1547 DESCRIPTION: OpenSSL could allow a local authenticated attacker to obtain sensitive information, caused by the ability to construct an EC group...

CVE-2020-3394

A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To exploit this vulnerability, the attack...

Default credentials

A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To exploit this vulnerability, the attack...