CVE-2020-3485

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

Design/Logic Flaw

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

CVE-2020-3485 Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

CVE-2020-3485 Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

CVE-2020-3485

CVE-2020-3485 describes a vulnerability in the web management software of Cisco Vision Dynamic Signage Director’s RBAC. The issue arises from improper handling of RBAC in the web interface, enabling an authenticated, remote attacker to view and delete screen content they should not access via a c...

CVE-2020-7824

A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission. The vulnerability is due to insecure permission when handling session cookies. An attacker could exploit this vulnerability by modification the cookie valu...

Design/Logic Flaw

A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission. The vulnerability is due to insecure permission when handling session cookies. An attacker could exploit this vulnerability by modification the cookie valu...

Cisco Vision Dynamic Signage Director Web Management Software Privilege Permission and Access Control Issues Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. A Permission Granting and Access Control Issue vulnerability exists in the Role-Based Access Control RBAC feature of the Web Management Software in versions prior to Cisco Vision Dynamic Signa...

Cisco Vision Dynamic Signage Director Web Management Interface Cross-Site Scripting Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. A cross-site scripting vulnerability exists in the Web management interface in Cisco Vision Dynamic Signage Director versions prior to 6.2 SP5, which stems from the program failing to properly...

Cisco Vision Dynamic Signage Director Web Management Interface Misconfiguration Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. A misconfiguration vulnerability exists in the Web management interface in Cisco Vision Dynamic Signage Director versions prior to 6.2 SP5, which stems from incorrect permissions in the Apache...

PT-2020-3766 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of Cisco DNA Center software. These vulnerabilities could allow an unauthenticated,...

The vulnerability in the web-based management interface of Cisco SD-WAN allows a hacker to enhance their privileges.

The vulnerability of the Cisco SD-WAN programmatically-defined network management web interface is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to enhance their privileges through specially crafted HTTP requests...

Lindy 42633 Authentication Bypass Vulnerability

The Lindy 42633 is a 4-port USB 2.0 Gigabit network server. An authentication bypass vulnerability exists in the Lindy 42633 2.078.000. An attacker on the same network can exploit this vulnerability to bypass authentication via a web management request that lacks a password parameter...

Cisco UCS Director Cross-Site Scripting Vulnerability

Cisco UCS Director is a heterogeneous platform for private cloud Infrastructure as a Service IaaS from Cisco. A cross-site scripting vulnerability exists in the web management interface in Cisco UCS Director versions prior to 6.7.4.1, which stems from the program failing to properly validate inpu...

Cisco Webex Meetings Cross-Site Scripting Vulnerability

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. A cross-site scripting vulnerability exists in the web management interface in Cisco Webex Meetings versions prior to T40.6.0, which stems from the program failing to adequately validate user-submitted input. The...

PT-2020-4229 · Cisco · Cisco Unified Communications Manager Im & Presence Service +3

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager affected versions not specified Cisco Unified Communications Manager Session Management Edition affected versions not specified Cisco Unified Communications Manager IM & Presence Service affected versions...

Cisco SD-WAN vManage Software License Issue Vulnerability (CNVD-2020-44061)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the web management interface in Cisco SD-WAN vManage Software. A remote attacker could exploit this vulnerability with a...

Cisco Small Business RV110W Wireless-N VPN Firewall and RV215W Wireless-N VPN Router Authorization Issues Vulnerability

The Cisco Small Business RV110W Wireless-N VPN Firewall Router is a VPN router from Cisco USA. An authorization issue vulnerability exists in the Web management interface of the Cisco Small Business RV110W Wireless-N VPN Firewall prior to version 1.2.2.8 and the RV215W Wireless-N VPN Router prior...

ASUS Home Router Bugs Open Consumers to Snooping Attacks

A pair of flaws in ASUS routers for the home could allow an attacker to compromise the devices – and eavesdrop on all of the traffic and data that flows through them. The bugs are specifically found in the RT-AC1900P whole-home Wi-Fi model, within the router’s firmware update functionality...

Cisco SD-WAN vManage Software Path Traversal Vulnerability (CNVD-2020-42258)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A path traversal vulnerability exists in the web management interface in Cisco SD-WAN vManage Software, which stems from the program failing to properly validate uploaded...