CVE-2013-3595

The CVE-2013-3595 issue affects Dell PowerConnect 3348, 3524p, and 5324 switches with the OpenManage web application (version 2.5 build 1.19). A remote authenticated user can trigger a denial-of-service (device reset) by issuing a direct request to an unspecified OSPF URL. Exploitation details ar...

CVE-2013-3594

The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service device reset or possibly execute arbitrary code by sending many packets to TCP port 22...

Siemens Fixes Authentication Bugs in Scalance X-200 Switches

Researchers have discovered two serious vulnerabilities in industrial Ethernet switches manufactured by Siemens that could enable attackers to perform unauthorized actions on the switches without authentication. One of the bugs allows attackers to hijack Web sessions and the other enables them to...

Cisco Nexus 4000 Series Switches IPv6 Denial of Service (CSCtd15904)

A vulnerability in the IP version 6 IPv6 packet handling routine of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to stop responding to neighbor solicitation NS requests, causing a limited denial of service DoS condition. The vulnerability is due to...

CVE-2013-6852

Cross-site request forgery CSRF vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators for requests that change an administrative password via the setPassword method...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators for requests that change an administrative password via the setPassword method...

CVE-2013-6852

CVE-2013-6852 affects HP 2620 switches, specifically the vulnerable component is the html/json.html CSRF implementation. The issue allows remote attackers to hijack administrator authentication and issue requests that change the device password via the setPassword method. The underlying root caus...

Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability (cisco-sa-20120215-nxos)

Cisco NX-OS Software is affected by a denial of service DoS vulnerability that could cause Cisco Nexus 1000v, 1010, 5000, and 7000 Series Switches, and the Cisco Virtual Security Gateway VSG for Nexus 1000V Series Switches, that are running affected versions of Cisco NX-OS Software to reload when...

Netgear ProSafe switches security vulnerabilities

Information leakage, DoS...

CVE-2013-5944

The vulnerability CVE-2013-5944 affects Siemens SCALANCE X-200 and X-200IRT switches. The integrated web server does not properly enforce authentication, enabling remote attackers to perform administrative actions via the management interface. Affected firmware: SCALANCE X-200 before 4.5.0 and X-...

Cisco Wireless LAN Controller (WLC) Version

The remote host is running Cisco Wireless LAN Controller WLC, an operating system for Cisco switches. It is possible to read the WLC version by connecting to the switch using SSH, SNMP, and/or CAPWAP. TRUSTED...

CVE-2013-5709

CVE-2013-5709 affects Siemens SCALANCE X-200 switches running firmware before 5.0.0. The vulnerability stems from an insufficient entropy source in the web server’s RNG used for session authentication, enabling remote attackers to hijack Web sessions by predicting random values. Documents from NV...

Multiple NetGear ProSafe Switches Information Disclosure Vulnerability

Multiple NetGear ProSafe switches are prone to an information- disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

HP ProCurve Switches Remote Unauthorized Information Disclosure

The remote HP ProCurve switch is missing a software update that corrects an issue where an attacker could remotely cause an unauthorized information disclosure. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69346; scriptversion"1.5"; scriptcvsdate"Date: 2018/07/12...

HP ProCurve 5400 zl Switches Compact Flash Card Security Issue

The remote HP ProCurve 5400 zl switch is missing a software update that corrects an issue with a compact flash card that may contain malware-infected content. Note that The J8726A Management Module in 5400 zl switches are only affected if they possess the following serial numbers : - ID116AS04P...

Information disclosure

The OSPF implementation on HP JD9A routers; HP J4A, J484B, J8A, JD3A, JEA, and JF55A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on...

CVE-2013-4806

CVE-2013-0149 centers on improper handling of duplicate Link State ID values in OSPF Link State Advertisements. Connected documents confirm concrete implementations affected: Extreme Networks EXOS (CVE-2013-7309): LSA processing does not consider duplicate LSA IDs, enabling remote impact to routi...

HP / 3COM / H3C switches security vulnerabilities

Code execution, information leakage...

[security bulletin] HPSBPV02891 rev.1 - HP ProCurve Switches, Remote Unauthorized Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03819065 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03819065 Version: 1 HPSBPV02891 rev....

CVE-2013-2340

Unspecified vulnerability on the HP ProCurve JCA, JCB, JDA, JDB, JEA, JFA, JFB, JFC, JGA, 658250-B21, and 658247-B21; HP 3COM routers and switches; and HP H3C routers and switches allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors...