Input validation

A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure ACI mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms o...

CVE-2019-1588

A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure ACI mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms o...

CVE-2019-1585 Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Tetration Analytics Agent Arbitrary Code Execution Vulnerability

A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to an incorrect permissions setting. An attacker could exploit this vulnerability...

Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Arbitrary File Read Vulnerability

A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure ACI mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms o...

PT-2019-1580

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Switches versions prior to 4.01h Description The issue is related to a misconfiguration in the controller authorization functionality of Cisco NX-OS, which could allow an authenticated, local attacker to escalate...

PT-2019-1564

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Switches in standalone NX-OS mode versions prior to 7.03I75 Description A vulnerability in the Tetration Analytics agent could allow an authenticated, local attacker to execute arbitrary code as root due to an incorrect...

PT-2019-1549

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Fabric Switches versions prior to 14.01h Description The issue is related to a lack of proper input and validation checking mechanisms of user-supplied input sent to an affected device. This could allow an authenticated...

PT-2019-1552

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to 7.03I49 and 7.03I74 on Nexus 3000 Series Switches Cisco NX-OS Software versions prior to 7.03I74 on Nexus 3500 Platform Switches Cisco NX-OS Software versions prior to 7.03F35 on Nexus 3600 Platform...

CVE-2019-1588: Improper Input Validation

A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure ACI mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms o...

Moxa IKS and EDS Cross-Site Scripting Vulnerabilities

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. A cross-site scripting vulnerability exists in the Moxa IKS and EDS series. The vulnerability stems from a failure to properly validate user input. An attacker could exploit this vulnerability to conduct a cross-site scriptin...

Moxa IKS and EDS Out-of-Bounds Read Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. An out-of-bounds read vulnerability exists in the Moxa IKS and EDS series. The vulnerability stems from a program failing to properly validate array boundaries. An attacker could use this vulnerability to read device memory a...

Moxa IKS and EDS Cross-Site Request Forgery Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. A cross-site request forgery vulnerability exists in the Moxa IKS and EDS series. An attacker could exploit this vulnerability to perform unauthorized operations on the device...

Moxa IKS and EDS Buffer Overflow Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. A buffer overflow vulnerability exists in the Moxa IKS and EDS series. An attacker could exploit this vulnerability to achieve remote code execution...

Moxa IKS and EDS predictable cookie vulnerabilities

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. A predictable cookie vulnerability exists in the Moxa IKS and EDS series. The vulnerability stems from software that generates a predictable cookie calculated using MD5 hashing, which can be exploited by an attacker to captur...

Moxa IKS and EDS Excess Authentication Attempts Improperly Restricted Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. An over-authentication attempt improper restriction vulnerability exists in the Moxa IKS and EDS series. An attacker could exploit this vulnerability via a brute force attack to discover passwords...

Moxa IKS and EDS Plaintext Password Storage Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. A plaintext password storage vulnerability exists in the Moxa IKS and EDS series. The vulnerability stems from a program storing passwords in plaintext form. An attacker could exploit this vulnerability to read sensitive...

Moxa IKS and EDS Sensitive Data Lack of Encryption Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. A lack of encryption vulnerability exists in the Moxa IKS and EDS series for sensitive data. The vulnerability stems from the fact that these devices use plaintext to transmit sensitive data. An attacker could exploit the...

How to Modify the Subnet IP (SNIP) and NetScaler IP (NSIP) on a NetScaler High Availability Pair

This article describes how to change the Subnet IP SNIP address and NetScaler IP NSIP address for a secondary or primary appliance of a high availability setup. Background You might want to change the SNIP and NSIP on an appliance because of the changes in the network setup or a redundant pair of...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System FC5022 16Gb SAN and EN4023 10Gb Scalable Switches

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. IBM Flex System FC5022 16Gb SAN and EN4023 10Gb Scalable Switches use OpenSSL and have addressed the applicable CVEs. Vulnerability Details Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by...