Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability (cisco-sa-20190501-nexus9k-sshkey)

According to its self-reported version, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode has a Default SSH System Key. An unauthenticated, remote attacker can exploit this, to gain root privileges. Please see the included Cisco BIDs and Cisco Security Advisory for more...

CVE-2020-3231: Improper Access Control

A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward broadcast traffic before being authenticated on the port. The vulnerability exists because broadcast traffic that is...

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability (cisco-sa-20190501-aci-hw-clock-util)

According to its self-reported version, Cisco NX-OS System Software in ACI Mode is affected by an elevation of privilege vulnerability in the filesystem management due to insufficent validation of user-supplied files. An authenticated, local attacker can exploit this, via creation of a custom fil...

Severe Cisco DoS Flaw Can Cripple Nexus Switches

Cisco has patched a high-severity flaw in its NX-OS software, the network operating system used by Cisco’s Nexus-series Ethernet switches. If exploited, the vulnerability could allow an unauthenticated, remote attacker to bypass the input access control lists ACLs configured on affected Nexus...

Huawei Data Communication: DoS Vulnerability in Huawei Switches (huawei-sa-20161130-01-switch)

There is a denial of service DoS vulnerability in Huawei switches due to improper management of system resources. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-30574)

NETGEAR FS752TP and so on are products of NETGEAR USA.NETGEAR FS752TP is a stackable smart switch.NETGEAR GS108T is an intelligent managed switch.NETGEAR M6100 is a fully managed switch. A security vulnerability exists in several NETGEAR products. The vulnerability can be exploited by an attacker...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (cisco-sa-20180328-bfd)

A denial of service DoS vulnerability exists in the Bidirectional Forwarding Detection BFD offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches due to insufficient error handling when the BFD header in a BFD packet is incomplete. An...

NETGEAR Elevation of Privilege Vulnerability

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A security vulnerability exists in several NETGEAR products. An attacker could exploit the vulnerability to elevate privileges...

Multiple Siemens Products Resource Management Error Vulnerability (CNVD-2020-23036)

Siemens SCALANCE X-200, SCALANCE X-200IRT and SCALANCE X-300 are industrial switch products. A resource management error vulnerability exists in multiple Siemens products that can be exploited by attackers to cause a denial of service...

Description of the security update for Microsoft Visual Studio 2008: July 28, 2009

Description of the security update for Microsoft Visual Studio 2008: July 28, 2009 INTRODUCTION Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...

Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform

Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform INTRODUCTION Microsoft has released security bulletin MS07-052. The security bulletin contains all the relevant information about the security update. This information includes file manifes...

CVE-2020-8832: Exposure of Sensitive Information to an Unauthorized Actor

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 "The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors." was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could u...

Belden HiOS and HiSecOS Buffer Overflow Vulnerabilities

Belden HiOS and Belden HiSecOS are both products of Belden, Inc. Belden HiOS is an operating system for Ethernet switches and Belden HiSecOS is an operating system for industrial security routers. A buffer overflow vulnerability exists in Belden HiOS and HiSecOS. The vulnerability originates when...

Hackers Exploit Zero-Day Bugs in Draytek Devices to Target Enterprise Networks

Cybersecurity researchers with Qihoo 360's NetLab today unveiled details of two recently spotted zero-day cyberattack campaigns in the wild targeting enterprise-grade networking devices manufactured by Taiwan-based DrayTek. According to the report, at least two separate groups of hackers exploite...

Hackers Exploit Zero-Day Bugs in Draytek Devices to Target Enterprise Networks

Cybersecurity researchers with Qihoo 360's NetLab today unveiled details of two recently spotted zero-day cyberattack campaigns in the wild targeting enterprise-grade networking devices manufactured by Taiwan-based DrayTek. According to the report, at least two separate groups of hackers exploite...

The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to trigger a service failure.

The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to carry out a brute-force attack.

The vulnerability of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS lies in the insufficient limitation on authentication attempts. Exploiting this vulnerability allows a remote attacker to execute a brute-force attack...

Security Bulletin: Vulnerability in DCNM Network Management Software used by IBM c-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in DCNM Network Management Software used by IBM c-type SAN directors and switches. Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL could allow a local attacker to bypass security restrictions, caused by the building of . mingw...

Security Bulletin: Vulnerability in DCNM Network Management Software used by IBM c-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in DCNM Network Management Software used by IBM c-type SAN directors and switches. Vulnerability Details CVEID: CVE-2019-1547 DESCRIPTION: OpenSSL could allow a local authenticated attacker to obtain sensitive information, caused by the ability ...

Cisco MDS 9000 Series Multilayer Switches Denial of Service Vulnerability

A denial of service DoS vulnerability exists in Cisco MDS 9000 Series Multilayer Switch due to improper resource usage control. An unauthenticated, remote attacker can exploit this issue, via sending traffic to the management interface mgmt0, to cause the system to stop responding. Please see the...