CVE-2017-12213

A vulnerability in the dynamic access control list ACL feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic...

CVE-2017-12213

The CVE-2017-12213 issue affects Cisco Catalyst 4000 Series Switches running IOS XE. It stems from an uncaught error when reassigning the auth-default-ACL dynamic ACL after 802.1x authentication fails, allowing an unauthenticated adjacent attacker to cause the dynamic ACL to fail open and forward...

CVE-2017-3752

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First OSPF routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers,...

Design/Logic Flaw

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First OSPF routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers,...

CVE-2017-3752

CVE-2017-3752 affects Lenovo/IBM networking gear implementing OSPF. The issue is an industry‑wide OSPF protocol implementation flaw that can allow an attacker within a routing domain to erase or alter routing tables by sending crafted OSPF messages, potentially impacting multiple devices that sup...

CVE-2017-3752

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First OSPF routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers,...

Industry-wide OSPF routing vulnerability on Lenovo and IBM Networking Switches - us

Lenovo Security Advisory: LEN-14078 Potential Impact: Erasure or alteration of routing tables within a routing domain Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3752 Summary Description: An industry-wide vulnerability has been identified in the implementation of the...

Building a Car Hacking Development Workbench: Part 3

Welcome back to the car hacking development workbench series. In part two we discussed how to read wiring diagrams. In part three, we are going to expand on the workbench by re-engineering circuits and replicate signals used in your vehicle. If this is your first time stumbling across this write...

Open Source Full Featured Network Operating System: OpenSwitch

Open Source Full Featured Network Operating System OpenSwitch provides a fully-featured L2/L3 control plane stack, traditional and programmatic, declarative control plane. The 24×7 nature of global digital economy and the explosion of data have changed how we think about data center networking...

CVE-2017-6655

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an FCoE-related process unexpectedly reloads. This vulnerability affects Cisco NX-OS Software o...

Design/Logic Flaw

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an FCoE-related process unexpectedly reloads. This vulnerability affects Cisco NX-OS Software o...

CVE-2017-6655

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an FCoE-related process unexpectedly reloads. This vulnerability affects Cisco NX-OS Software o...

CVE-2017-6655

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an FCoE-related process unexpectedly reloads. This vulnerability affects Cisco NX-OS Software o...

Authentication flaw

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service device restart via vectors involving authentication, whi...

CVE-2015-2800

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service device restart via vectors involving authentication, whi...

CVE-2015-2800

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service device restart via vectors involving authentication, whi...

CVE-2015-2800

CVE-2015-2800 affects Huawei Campus switches: S5700/S5300/S6300/S6700 with software before V200R001SPH012 and S7700/S9300/S9700 with software before V200R001SPH015. The issue is an authentication-triggered array access violation in the user authentication module that can cause a remote DoS (devic...

Cisco Patches Critical Flaws in Prime Data Center Network Manager

A debugging tool left on in deployments of Cisco’s large-scale data center management software could be remotely accessed and allow an attacker to run code with root privileges. Cisco made an update available that patches this and one other critical vulnerability in the same management software,...

Cisco Nexus 5000 Series Switches NX-OS System Software Command Injection Vulnerability

Cisco Nexus 5000 Series Switches are the Cisco Nexus series of data center-class switches from Cisco, Inc.Cisco NX-OS System Software is the data center operating system that runs on them. A command injection vulnerability exists in the CLI of Cisco NX-OS System Software versions 7.1 through 7.3 ...

Command injection

A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could...