CVE-2018-0244: Protection Mechanism Failure

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file action policy to drop the Server Message Block SMB protocol if a malware file is detected. The vulnerability is due to how the SMB protocol handle...

Cisco Firepower Detection Engine Secure Sockets Layer Denial of Service Vulnerability

A vulnerability in the Secure Sockets Layer SSL packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the detection engine to consume excessive system memory on an affected device, which could cause a...

Intel Halts Spectre Fixes On Older Chips, Citing Limited Ecosystem Support

Intel has halted patches for an array of older chips that would protect them against the Spectre vulnerability, according to a recent microcode update. The microcode update shows that its older products – including Wolfdale, Bloomfield, Clarksfield, Gulftown, Harpertown, Jasper Forest, SoFIA 3GR,...

CVE-2016-8365

OSIsoft PI System software Applications using PI Asset Framework AF Client versions prior to PI AF Client 2016, Version 2.8.0; Applications using PI Software Development Kit SDK versions prior to PI SDK 2016, Version 1.4.6; PI Buffer Subsystem, versions prior to and including, Version 4.4; and PI...

Cisco IOS Software and IOS XE Software Denial of Service Vulnerability (CNVD-2018-07300)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. A resource management error vulnerability exists in the Smart Install feature of Cisco IOS Software and IOS XE Software, which results from the program failing to properly validate packet...

Troubleshooting Gateway Insight on NetScaler MAS

Troubleshooting Gateway Insight on NetScaler MAS...

CVE-2018-0138

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block files transmitted to an affected device via the BitTorrent protocol. The vulnerability exists because the affected softwa...

CVE-2018-0138

CVE-2018-0138 affects Cisco Firepower System Software’s detection engine, enabling an unauthenticated remote attacker to bypass BitTorrent file policies by sending crafted BitTorrent handshake requests. This bypass specifically targets the detection logic that blocks BitTorrent-delivered files; e...

CVE-2018-0138

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block files transmitted to an affected device via the BitTorrent protocol. The vulnerability exists because the affected softwa...

CVE-2018-0138

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block files transmitted to an affected device via the BitTorrent protocol. The vulnerability exists because the affected softwa...

CVE-2018-0138: Protection Mechanism Failure

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block files transmitted to an affected device via the BitTorrent protocol. The vulnerability exists because the affected softwa...

PT-2018-8638

Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software affected versions not specified Description: A vulnerability in the detection engine could allow an unauthenticated, remote attacker to bypass file policies configured to block files transmitted via the...

CVE-2018-0092

A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacker to improperly delete valid user accounts. The network-operator role should not be able to delete other configured users on the device. The vulnerability is...

CVE-2018-0092

A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacker to improperly delete valid user accounts. The network-operator role should not be able to delete other configured users on the device. The vulnerability is...

CVE-2018-0090

A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...

CVE-2018-0092

CVE-2018-0092 affects Cisco NX-OS System Software on Nexus platforms (Nexus 3000/3600/9000 standalone NX-OS and Nexus 9500 R-series line cards/fabric modules). The root cause is insufficient RBAC checks for the network-operator role, allowing an authenticated, local attacker to delete other confi...

CVE-2018-0092: Missing Authorization

A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacker to improperly delete valid user accounts. The network-operator role should not be able to delete other configured users on the device. The vulnerability is...

CVE-2018-0090: Improper Input Validation

A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...

PT-2018-8602

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS System Software affected versions not specified Description: A vulnerability in the network-operator user role implementation could allow an authenticated, local attacker to improperly delete valid user accounts due to a lack of...

PT-2018-8600

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS System Software versions 7.3.2 and earlier Description: A vulnerability in the management interface access control list ACL configuration could allow an unauthenticated, remote attacker to bypass configured ACLs on the management...