Security Bulletin: Security vulnerability in IBM WebSphere Application Server affects IBM Voice Gateway

Summary A security vulnerability in IBM WebSphere Application Server affects IBM Voice Gateway Vulnerability Details CVEID: CVE-2019-4046 DESCRIPTION: IBM WebSphere Application Server is vulnerable to a denial of service, caused by improper handling of request headers. A remote attacker could...

Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway

Summary Security Vulnerabilities in Node.js affect IBM Voice Gateway. Vulnerability Details CVEID: CVE-2019-5737 DESCRIPTION: Node.js is vulnerable to a denial of service. By establishing an HTTP or HTTPS connection in keep-alive mode and sending headers very slowly to force the connection and...

Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway

Summary Security Vulnerabilities in Node.js affect IBM Voice Gateway. Vulnerability Details CVEID: CVE-2018-12122 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by improper validation of HTTP headers. By sending headers very slowly keeping HTTP or HTTPS connections and associat...

Security Bulletin: Multiple vulnerabilities affect IBM Voice Gateway

Summary Multiple vulnerabilities affect IBM Voice Gateway Vulnerability Details CVEID: CVE-2018-8039 DESCRIPTION: Apache CXF could allow a remote attacker to conduct a man-in-the-middle attack. The TLS hostname verification does not work correctly with com.sun.net.ssl interface. An attacker could...

Root privilege backdoor vulnerability in DBL Technology GSM voice gateway

DBL Technology is a communication equipment manufacturer located in Shenzhen, China. Its main products include GSM voice gateway, IP telephony gateway, enterprise softswitch, etc., which are mostly used by telephony companies and VoIP service providers. A root privilege backdoor vulnerability...

Unauthorized Access Vulnerability in H3C Voice Gateway

H3C VG voice gateway device is a new generation of voice, fax and data integrated access device developed by H3C for industry and enterprise users. An unauthorized access vulnerability exists in H3C VG 10-40, which allows attackers to obtain sensitive information about the gateway device...

NETGEAR Voice Gateway 2.3.0.23_2.3.23 - Multiple Vulnerabilities

NETGEAR Voice Gateway 2.3.0.232.3.23 - Multiple Vulnerabilities Exploit Title: Netgear Voice Gateway Multiple Vulnerabilities Date: May 01, 2015 No response from Vendor Discovered by: Karn Ganeshen Vendor Homepage: www.netgear.com Version: Firmware Version: V2.3.0.232.3.23 Netgear Voice Gateway...

Netgear Voice Gateway 2.3.0.23_2.3.23 - Multiple Vulnerabilities

Exploit Title: Netgear Voice Gateway Multiple Vulnerabilities Date: May 01, 2015 No response from Vendor Discovered by: Karn Ganeshen Vendor Homepage: www.netgear.com Version: Firmware Version: V2.3.0.232.3.23 Netgear Voice Gateway Multiple Vulnerabilities Device Info Device Type: Netgear Voice...

Netgear Voice Gateway 2.3.0.23_2.3.23 XSS / Code Execution

Exploit Title: Netgear Voice Gateway Multiple Vulnerabilities Date: May 01, 2015 No response from Vendor Discovered by: Karn Ganeshen Vendor Homepage: www.netgear.com Version: Firmware Version: V2.3.0.232.3.23 Netgear Voice Gateway Multiple Vulnerabilities Device Info Device Type: Netgear Voice...

Netgear Voice Gateway 2.3.0.23_2.3.23 - Multiple Vulnerabilities

Netgear Voice Gateway with firmware version 2.3.0.232.3.23 suffers from command injection, insecurely configured passwords, and cross site scripting vulnerabilities. Exploit Title: Netgear Voice Gateway Multiple Vulnerabilities Date: May 01, 2015 No response from Vendor Discovered by: Karn Ganesh...

Cisco IOS Voice Gateway Malformed ISDN Q931 Message Denial of Service Vulnerability

A vulnerability in the Integrated Services Digital Network ISDN processing code of Cisco IOS could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. The vulnerability is due to improper processing of malformed ISDN Q931 SETUP messages. An attacker could exploit...