CVE-2018-9232

Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update...

CVE-2018-9232

Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update...

CVE-2018-9232

Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update...

CVE-2018-9232

CVE-2018-9232 affects Gongjin Electronics’ T&W WIFI Repeater BE126. The connected CNVD entry confirms a vulnerability caused by failure to authenticate firmware during the upgrade process, enabling an attacker to craft malicious firmware and install it as an update. No explicit fixes are listed i...

After I upgrade Windows 10 on my OS layer, what do I do about the C:\Windows.old folder?

When you upgrade Windows 10 from one major version to another 1703 to 1709, for instance, the previous Windows installation is left in a C:\Windows.old folder. In App Layering, you must not delete this folder. Our software needs to copy our drivers and other files from Windows.old to Windows once...

FAQ: NetScaler SD-WAN Installation and Upgrade

Q: Can I downgrade a NetScaler SD-WAN 4000/5000 appliance to an earlier software release? A : A NetScaler SD-WAN 4000/5000 appliance cannot be downgraded to an earlier release.The appliance should have to be factory reset and provisioned again from scratch. For example, if an appliance is running...

Mitochrome upgrade process has an arbitrary file download vulnerability

Meitu Xiu Xiu is a photo manipulation software. Mito Xiu Xiu in the upgrade process exists arbitrary file download vulnerability, due to the program in the update process does not use any encryption algorithms, the query domain name does not exist any checksum mechanism, the new version of the...

FAQ: Single-Step Upgrade for SD-WAN Appliances to 9.3.x

Question: Should I use .tar.gz, or single step upgrade .zip package to upgrade to 9.3.x from my current version 8.1.x, 9.1.x, 9.2.x? Answer: Use the .tar.gz files of the concerned platforms to upgrade the SD-WAN software to 9.3.x. After the SD-WAN software is upgraded to 9.3.x version, perform...

Cisco Spark Board Local Security Bypass Vulnerability

Cisco Spark Board is a dedicated tablet device for video conferencing from Cisco. A local security bypass vulnerability exists in the upgrade process in Cisco Spark Board, which arises from the program failing to adequately validate the upgrade package. A local attacker could exploit the...

Security feature bypass

A vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated, local attacker to install an unverified upgrade package, aka Signature Verification Bypass. The vulnerability is due to insufficient upgrade package validation. An attacker could exploit this vulnerability b...

CVE-2017-12306

A vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated, local attacker to install an unverified upgrade package, aka Signature Verification Bypass. The vulnerability is due to insufficient upgrade package validation. An attacker could exploit this vulnerability b...

CVE-2017-12306

A vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated, local attacker to install an unverified upgrade package, aka Signature Verification Bypass. The vulnerability is due to insufficient upgrade package validation. An attacker could exploit this vulnerability b...

CVE-2017-12306

The CVE concerns Cisco Spark Board: a local, authenticated attacker could bypass signature verification during the upgrade process due to insufficient upgrade package validation, enabling installation of a user-controlled, potentially custom firmware. This describes a local impact with the attack...

PT-2017-12481

Name of the Vulnerable Software and Affected Versions Cisco Spark Board affected versions not specified Description The issue is related to insufficient upgrade package validation in the upgrade process, allowing an authenticated, local attacker to install an unverified upgrade package. This coul...

Cisco Spark Board Upgrade Signature Verification Bypass Vulnerability

A vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated, local attacker to install an unverified upgrade package. The vulnerability is due to insufficient upgrade package validation. An attacker could exploit this vulnerability by providing the upgrade process wit...

How to Upgrade Receiver from StoreFront

Question: How to upgrade Receiver from StoreFront? Answer: 1. Go to C:\Program Files\Citrix\Receiver StoreFront\Receiver Clients\. Create a Windows folder if it doesn’t exist. 2. In the Windows folder, paste the Receiver for Windows with the version you want to set as the threshold, overwriting...

PT-2016-4567 · Php +3 · Phpmailer +3

Name of the Vulnerable Software and Affected Versions: PHPMailer versions prior to 5.2.20 Description: The issue is related to the isMail transport in PHPMailer, where improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP might allow...

Multiple F5 Products Certificate Validation Forgery Spoofing Vulnerability

F5 BIG-IP LTM is a local traffic manager; APM is a suite of solutions that provide secure unified access to business-critical applications and networks. A checksum forgery spoofing vulnerability exists in multiple F5 product certificates. Failure to properly validate the server certificate when t...

Upgrading to 5.5.1 from 5.4.3 didn't update xwork from 1.13 to 1.17

We recently upgraded our instance following your security advisory. It was discovered shortly after the upgrade that the xwork file that was vulnerable 1.13 was not upgraded to the safe version 1.17. This could have just been specific to our instance but you should check your upgrade process and...

RHEL 3 / 4 : redhat-release (EOL Notice) (RHSA-2011:0002)

This is the End Of Life notification for RHN Proxy Server 4. On December 31st, 2010, per the life cycle support policy, the version 4 series of Satellite and Proxy products exited Production Phase 2 marking the end of their support by Red Hat. Please reference the support policy here :...