Security Advisory - Memory Leak Vulnerability in Huawei Switches

When serving as an HTTPS or SFTP server, the Huawei switch stores a user's SSL session information in the memory even after the user logs out. If the memory occupied by the SSL session information exceeds the allocated amount, memory leak occurs, causing the device to restart. Vulnerability ID:...

HPE Network Switches Local Security Bypass Vulnerability

HPE Network Switches is a network switch from Hewlett-Packard HP. A security vulnerability exists in HPE Network Switches version 15.16.x and 15.17.x. It allows a local attacker to bypass security access restrictions by utilizing unspecified vectors...

HPE Network Switches Local Security Bypass Vulnerability (CNVD-2016-00112)

HPE Network Switches is a network switch from Hewlett-Packard HP. A security vulnerability exists in HPE Network Switches version 15.16.x and 15.17.x. It allows a local attacker to bypass security access restrictions by utilizing unspecified vectors...

CVE-2015-6860

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859...

CVE-2015-6859

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860...

Design/Logic Flaw

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860...

Design/Logic Flaw

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859...

CVE-2015-6860

CVE-2015-6860 affects Hewlett Packard Enterprise (HPE) Network Switches running software 15.16.x and 15.17.x, enabling local attackers to bypass intended access restrictions via unspecified vectors. Connected CNVD entries corroborate the same product and version range. The publicly provided docum...

CVE-2015-6860

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859...

CVE-2015-6859

CVE-2015-6859 affects HPE Network Switches running software 15.16.x and 15.17.x, where a local attacker can bypass security access restrictions via unspecified vectors. The connected sources confirm the affected product/versions and the local bypass impact, but do not provide the root cause, exac...

CVE-2015-6859

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860...

Advantech Switch Bash Environment Variable Code Injection Exploit

This Metasploit module exploits the Shellshock vulnerability, a flaw in how the Bash shell handles external environment variables. This Metasploit module targets the 'ping.sh' CGI script, accessible through the Boa web server on Advantech switches. This Metasploit module was tested against firmwa...

Advantech Switch Bash Environment Variable Code Injection (Shellshock)

This module exploits the Shellshock vulnerability, a flaw in how the Bash shell handles external environment variables. This module targets the 'ping.sh' CGI script, accessible through the Boa web server on Advantech switches. This module was tested against firmware version 1322D1.98. This module...

Cisco Firepower 9000 Series Switches点击劫持漏洞

No description provided by source...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns2)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

多款Huawei路由器信息泄露漏洞

Summary The CF cards on some Huawei switches and ARs contain some sensitive information in plaintext. Once an attacker gets such a CF card, it may result in the leak of sensitive information HWPSIRT-2015-07048. This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID:...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns1)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Multiple Huawei router information leakage vulnerability

Huawei S7700 is a product of Huawei, China.Huawei S7700, S9700, and S9300 are intelligent routing switches.Huawei AR200, AR1200, AR2200, and AR3200 are multi-service routers for enterprises. An information disclosure vulnerability exists in the CF card of multiple Huawei routers, which allows loc...

Multiple Huawei eSpace switch denial of service vulnerabilities

Huawei eSpace U1910, eSpace U1911, eSpace U1930, eSpace U1960, eSpace U1980, and eSpace U1981 are eSpace U1900 series switch products from Huawei, China. A security vulnerability exists in the exception handling mechanism in the CLI Module of several Huawei eSpace switches, which allows remote...

Multiple GE Switches Cross-Site Scripting Vulnerability

GE Multilink ML800 and others are Ethernet switch products from General Electric GE. A cross-site scripting vulnerability exists in multiple GE switches. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML...