CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

CVE-2023-20188

The CVE-2023-20188 issue affects Cisco Small Business 200 Series Smart Switches, 300 Series Managed Switches, and 500 Series Stackable Managed Switches. It is a web-based management interface stored XSS caused by insufficient input validation, exploitable by an authenticated user who views a page...

多款Cisco产品 跨站脚本漏洞

Cisco Small Business 200 Series Smart Switches and so on are the products of the American Cisco Cisco company.Cisco Small Business 200 Series Smart Switches is a small smart switch device.Cisco Small Business 300 Series is an enterprise-class managed switch.Cisco Small Business 300 Series Managed...

CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

Zyxel Firewalls Under Attack! Urgent Patching Required

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday placed two recently disclosed flaws in Zyxel firewalls to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerabilities, tracked as CVE-2023-33009 and CVE-2023-33010, are buff...

CVE-2023-33778

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their o...

CVE-2023-33778

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their o...

Draytek Vigor Routers 信任管理问题漏洞

DrayTek Vigor routers are a series of routers from DrayTek Taiwan. A security vulnerability exists in Draytek Vigor Routers firmware versions prior to 3.9.6/4.2.4, Access Points firmware versions prior to v1.4.0, Switches firmware versions prior to 2.6.7, Myvigor firmware versions prior to 2.3.2 ...

PT-2023-9803 · Draytek · Draytek Vigor Switches +3

Name of the Vulnerable Software and Affected Versions: Draytek Vigor Routers versions below 3.9.6/4.2.4 Draytek Vigor Access Points versions below v1.4.0 Draytek Vigor Switches versions below 2.6.7 Draytek Vigor Myvigor versions below 2.3.2 Description: The issue is related to the use of hardcode...

Security Bulletin: IBM b-type SAN switches and directors affected by Open Source OpenSSL Vulnerabilities (CVE-2016-2180).

Summary IBM b-type SAN switches and directors has addressed Open Source OpenSSL Vulnerabilities. Vulnerability Details CVEID:CVE-2016-2180 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds read in the TSOBJprintbio function. A remote attacker could exploit this...

PT-2023-8185 · Zyxel · Zyxel Gs1900-8

Name of the Vulnerable Software and Affected Versions: Zyxel GS1900-8 firmware version V2.70AAHH.3 Zyxel GS1900-8HP firmware version V2.70AAHI.3 Description: The issue is related to a privilege escalation vulnerability that could allow an authenticated, local attacker with administrator privilege...

The vulnerability of the POST request processing mechanism on Siemens SCALANCE industrial switches allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the POST request processing mechanism on Siemens SCALANCE industrial switches lies in the overflow of the stack-based buffer. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code...

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial switches arises from buffer overflows based on stacks. This allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial switches is caused by buffer overflows based on stacks. Exploiting this vulnerability can allow a remote attacker to cause maintenance failures or execute arbitrary code...

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches allows a perpetrator to trigger a service failure.

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failure using specially...

CVE-2023-20024

creationtimestamp| type| source ---|---|--- 2023-05-22 14:10:50+00:00| seen| https://www.cert.at/de/warnungen/2023/5/kritische-sicherheitslucken-in-cisco-switches-exploit-code-offentlich-updates-teilweise-verfugbar...

CVE-2023-20157

creationtimestamp| type| source ---|---|--- 2023-05-22 14:10:50+00:00| seen| https://www.cert.at/de/warnungen/2023/5/kritische-sicherheitslucken-in-cisco-switches-exploit-code-offentlich-updates-teilweise-verfugbar...