Security Advisory - Improper Authentication Vulnerability in Some Huawei CloudEngine Products

Products Switches Routers WLAN Storage See All Solutions Cloud Data Center Enterprise Networking Intelligent Computing Solutions by Industry See All Services Training and Certification Industry Cloud Enablement Service Improvement Service Customer Support Service See All Partner Find a Partner...

Cisco Extends Patch for IPv6 DoS Vulnerability

Cisco has extended its patch for a high-severity IPv6 denial-of-service DoS vulnerability that was first addressed in 2016. The bug CVE-2016-1409 is a vulnerability in the IPv6 packet processing functions of multiple Cisco products, which could allow an unauthenticated, remote attacker to cause a...

Rockwell Automation Stratix and ArmorStratix Switches < 15.3 IOS SNMP Remote Code Execution (ICSA-17-208-04)

Binary data 720289.prm...

Denial of Service Vulnerability in MOXA EtherDevice Switch EDS Series Switches

MOXA EtherDevice Switch EDS series is a series of industrial switches introduced by Moxa. A denial of service vulnerability exists in the MOXA EtherDevice Switch EDS Series switches. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2019-1977

CVE-2019-1977 affects Cisco Nexus 9000 Series switches running in Application Centric Infrastructure (ACI) mode. The flaw is in Endpoint Learning: when packets arrive on a port from outside the ACI fabric and are destined for an endpoint on a border leaf with Disable Remote Endpoint Learning enab...

CVE-2019-1977 Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning Vulnerability

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an endpoint device in certain circumstances. The...

CVE-2019-1977: Undefined Security Weakness

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an endpoint device in certain circumstances. The...

PT-2019-3272

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Switches affected versions not specified Description The issue is related to errors in state management within the Endpoint Learning feature of the Cisco Nexus 9000 Series Switches. This could allow a remote attacker to...

Cisco Patches Six Critical Bugs in UCS Gear and Switches

Cisco Systems is warning of six critical vulnerabilities impacting a wide range of its products, including its Unified Computing System server line and its small business 220 Series Smart switches. In all instances of the vulnerabilities, a remote unauthenticated attacker could take over targeted...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS Uncontrolled Resource Consumption

Binary data 720280.prm...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS Resource Management Errors and Improper Input Validation

Binary data 720279.prm...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2019-27702)

SCALANCE SC firewall is used to protect trusted industrial networks from untrusted networks. It allows input and output network connections to be filtered in different ways.SCALANCE X switches a are used to connect industrial components such as programmable logic controllers PLCs or human machine...

ICSA-19-225-03_Siemens SCALANCE X Switches (Update D)

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE X switches Vulnerability: Insufficient Resource Pool 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-19-225-03 Siemens SCALANCE...

Cisco Adaptive Security Appliance - Path Traversal Exploit

Exploit for hardware platform in category web applications require 'msf/core' class MetasploitModule "Cisco Adaptive Security Appliance - Path Traversal", 'Description' = %q Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 A security vulnerability in Cisco ASA that would allow an...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

CVE-2019-1914

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

CVE-2019-1913

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

CVE-2019-1913

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

Authorization

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management interface. An attacker could exploit this...

Input validation

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...