CVE-2018-15462

A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an increase in CPU and memory usage, resulting in a denial of service DoS condition...

USN-3956-1 bind9 vulnerability

It was discovered that Bind incorrectly handled limiting the number of simultaneous TCP clients. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service...

The vulnerability of the TCP/IP protocol implementation in the Windows operating system allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the TCP/IP protocol implementation in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information by using specially crafted fragmented IP...

CVE-2019-1599

A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to an issue with allocating and freeing memory buffers in the network stack. An attacker could...

PowerDNS Recursor Lua Security Policy Bypass Vulnerability

PowerDNS Recursor aka pdnsrecursor is a domain name resolution server from the Dutch company PowerDNS. A security feature issue vulnerability exists in PowerDNS Recursor versions 4.1.4 through 4.1.8, which arises from the program failing to implement the Lua hooks mechanism for queries received...

The vulnerability of the Oracle Solaris operating system’s kernel, which allows a intruder to trigger a service failure

The vulnerability of the Oracle Solaris operating system’s kernel is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the TCP protocol...

The vulnerability of microprogrammed software in Siemens Simatic S7-1200 programmable logic controllers arises from the exceeding of specified resource limits. This allows a malicious entity to exhaust available network connections and cause failures in the device’s network communication capabilities.

The vulnerability of Siemens Simatic S7-1200 programmable logic controllers’ microprogramming software is related to the overuse of resources. Exploiting this vulnerability can allow an attacker to exhaust available network connections and cause failures in the device’s network communication by...

CVE-2018-0282

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block TCB state. While this...

Siemens SIMATIC S7-400 Input Validation Vulnerability

Siemens SIMATIC S7-400 is a programmable logic controller for manufacturing and process automation from Siemens, Germany. An input validation vulnerability exists in the Siemens SIMATIC S7-400. An attacker can exploit this vulnerability by sending specially crafted packets to TCP port 102 to caus...

Microsoft Windows TCP/IP Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. Microsoft Windows suffers from an information disclosure vulnerability. An attacker could exploit this vulnerability to obtain information...

CVE-2018-0421

A vulnerability in TCP connection management in Cisco Prime Access Registrar could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the application unexpectedly restarts. The vulnerability is due to incorrect handling of incoming TCP SYN packets to specifi...

kernel: TCP segments with random offsets allow a remote denial of service (SegmentSmack)

A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A remote attacker could use this flaw to trigger time and calculation expensive calls to tcpcollapseofoqueue and tcppruneofoqueue functions by sending specially modified packets within ongoing T...

FreeBSD CPU Resource Consumption Vulnerability

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project, headed by the Core Team team, and is an important branch of Unix-like systems that have evolved through BSD, 386BSD, and 4.4BSD. A security vulnerability exists in FreeBSD versions prior to 11.2-RELEASE-p1,...

The vulnerability of the TCP/IP component in InduSoft Web Studio and InTouch Machine Edition HMI/SCADA systems allows attackers to execute arbitrary code or cause malfunctions during maintenance operations.

The vulnerability of the TCP/IP component in InduSoft Web Studio and InTouch Machine Edition HMI/SCADA systems arises from buffer overflows due to deficiencies in input data processing tags, events, signaling messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

Cisco FireSIGHT System Remote Security Bypass Vulnerability

The Cisco FireSIGHT System is an integrated suite of network security and traffic management products that can be deployed on a dedicated platform or as a software solution. A URL-based remote security bypass vulnerability exists in the detection engine of the Cisco FireSIGHT System. The...

CVE-2018-3852

An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability...

Cisco SocialMiner Denial of Service Vulnerability

Cisco SocialMiner is the United States Cisco Cisco a social media call center solution. The solution supports social media monitoring and analytics. A denial of service vulnerability exists in the TCP stack in Cisco SocialMiner. A remote attacker could exploit this vulnerability to cause a denial...

Moxa EDR-810 Information Disclosure Vulnerability

The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. An information disclosure vulnerability exists in the server proxy feature of the Moxa EDR-810 V4.1 build 17030317. An attacker can exploit this...

CVE-2017-12128

An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted TCP packet can cause information disclosure. An attacker can send a crafted TCP packet to trigger this vulnerability...

PT-2018-5369 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: An information disclosure issue exists in the Server Agent functionality. A specially crafted TCP packet can cause information disclosure. An attacker can send a crafted TCP packet to trigg...