GarrettCom Magnum 6K and 10K Switches Information Disclosure Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. An information disclosure vulnerability exists in GarrettCom Magnum 6K and 10K Switches, which allows remote attackers to exploit the vulnerability to gain unauthorized access to the devices via sensitive information...

Cisco Catalyst 6500 Series Switches Denial of Service Vulnerability

The Cisco Catalyst 6500 Series Switches are a set of 6500 series switch products. A denial of service vulnerability exists in the Cisco Catalyst 6500 Series Switches that could allow a remote attacker to submit a special request to reload the switch, resulting in a denial of service attack...

kernel: partial ASLR bypass through TLS base addresses leak

An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage TLS during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process...

Cisco Catalyst 6500 Series Switches IPsec Tunnel Handling Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKE subsystem of the Cisco WS-IPSEC-3 service module could allow an authenticated, remote attacker to cause a reload of the Catalyst switch. The vulnerability is due to insufficient bounds checks on a specific message during the establishment of an IPs...

Moxa Industrial Managed Switch Vulnerabilities

OVERVIEW Erwin Paternotte of Applied RiskApplied Risk Security Advisory AR2015001, Multiple Vulnerabilities in Moxa industrial manages switches, http://applied-risk.com/application/files/3414/4060/7148/AdvisoryMoxaMultipleVulnerabilities.pdf, web site last accessed September 3, 2015. has identifi...

HTTP Response Splitting Vulnerability in Multiple IBM Flex System Products

IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches are both products of IBM USA. The former is an Ethernet adapter product; the latter is a switch product. A security vulnerability exists in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches due to the...

The vulnerabilities of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, allow attackers to cause malfunctions during maintenance operations.

The vulnerability of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Cisco IOS Software Denial of Service Vulnerability (CNVD-2015-01122)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability exists in Cisco IOS Software, which can be exploited by an attacker to reload the device and deny service to legitimate users...

Siemens ICS Switches Hit With Buffer Overflow, Authentication Bugs

There are a number of serious vulnerabilities in the Siemens Ruggedcom WIN switches, including a remotely exploitable buffer overflow and a flaw that could allow an attacker to take actions on the device without authentication. The vulnerabilities affect several models of the Ruggedcom WIN...

CVE-2015-1460

Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted packet...

Code injection

Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted packet...

CVE-2015-1460

CVE-2015-1460 affects Huawei Quidway switches. The vulnerability exists in firmware prior to V200R005C00SPC300, enabling remote attackers to gain privileges via a specially crafted packet. The Huawei PSIRT advisory HW-411975 notes that official fixes are available, implying remediation through up...

CVE-2015-1460

Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted packet...

Huawei Quidway Switches Remote Security Bypass Vulnerability

Huawei Quidway switches are Ethernet switch products from Huawei, China. A remote security bypass vulnerability exists in Huawei Quidway Switches, which could be exploited by an attacker to bypass certain security restrictions, perform unauthorized operations, or launch a denial-of-service attack...

Siemens Scalance X Switches 'HTTP' Request Denial of Service Vulnerability

Siemens Scalance X Switches are switching devices developed by Siemens. The Siemens Scalance X Switches 'HTTP' request denial of service vulnerability allows an attacker to reboot the affected device and deny service to legitimate users...

Siemens Scalance X Switches Denial of Service Vulnerability

Siemens Scalance X Switches are switching devices developed by Siemens. A denial of service vulnerability exists in Siemens Scalance X Switches, which allows an attacker to reboot the affected device and deny service to legitimate users...

CVE-2014-8478

The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service reboot via malformed HTTP requests...

CVE-2014-8479

The CVE-2014-8479 entry affects Siemens SCALANCE X-300 switches (and X-408) with firmware before 4.0, where the FTP server component can be abused by remote authenticated users to trigger a reboot (DoS) via specially crafted FTP packets. Root cause centers on the FTP server handling of crafted tr...

CVE-2014-8479

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

Security Advisory-Authority Control Vulnerability in Quidway Switches

Huawei Quidway switches have the authority control vulnerability in access authentication, which may be exploited by attackers to obtain higher access permissions. Vulnerability ID: HWPSIRT-2014-11119 This Vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2015-1460...