CVE-2022-20690: Improper Handling of Length Parameter Inconsistency

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

CVE-2022-41807: Missing Authorization

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

CVE-2021-34577: Use of Hard-coded Credentials

In the Kaden PICOFLUX AiR water meter an adversary can read the values through wireless M-Bus mode 5 with a hardcoded shared key while being adjacent to the device...

CVE-2022-22226 Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash

In VxLAN scenarios on EX4300-MP, EX4600, QFX5000 Series devices an Uncontrolled Memory Allocation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated adjacently located attacker sending specific packets to cause a Denial of Service DoS conditio...

CVE-2022-33948: Improper Neutralization of Special Elements used in an OS Command

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

CVE-2022-22196: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker with an established ISIS adjacency to cause a Denial of Service DoS. The rpd CPU spikes to 100%...

PT-2022-3761

Name of the Vulnerable Software and Affected Versions Cisco 1000 Series Connected Grid Router CGR1K affected versions not specified Description A vulnerability in the integrated wireless access point AP packet processing could allow an unauthenticated, adjacent attacker to cause a denial of servi...

PT-2022-15521

Name of the Vulnerable Software and Affected Versions Dell EMC AppSync versions 3.9 to 4.3 Description The issue allows an adjacent unauthenticated attacker to potentially exploit the vulnerability, leading to password brute-forcing. This can result in account takeover if weak passwords are used ...

CVE-2022-22172: Missing Release of Memory after Effective Lifetime

A Missing Release of Memory after Effective Lifetime vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a memory leak. Continued exploitation can lead to memory exhaustion and thereby a...

CVE-2022-22163: Improper Input Validation

An Improper Input Validation vulnerability in the Juniper DHCP daemon jdhcpd of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service DoS. If a device is configured as DHCPv6 local server and persistent storage is enabled,...

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. When parsing the SOAPLOGINTOKEN...

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.781.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setupwizard.cgi page. A crafted SOAP request can trigg...

PT-2021-7070

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family affected versions not specified Description A vulnerability in Simple Network Management Protocol SNMP trap generation for wireless clients could allow an unauthenticated,...

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

CVE-2021-34860: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

PT-2021-19269

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on QFX5000 and EX4600 Series versions prior to 17.3R3-S12 Juniper Networks Junos OS on QFX5000 and EX4600 Series 17.4 versions prior to 17.4R3-S5 Juniper Networks Junos OS on QFX5000 and EX4600 Series 18.3 versions...

PT-2021-19266

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.4R3-S9 Juniper Networks Junos OS 19.1 versions prior to 19.1R3-S7 Juniper Networks Junos OS 19.2 versions prior to 19.2R1-S7, 19.2R3-S3 Juniper Networks Junos OS 19.3 versions prior to 19.3R2-S6,...

PT-2021-19261

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.2R3-S8 Juniper Networks Junos OS versions 18.3 prior to 18.3R3-S5 Juniper Networks Junos OS versions 18.4 prior to 18.4R3-S9 Juniper Networks Junos OS versions 19.1 prior to 19.1R3-S7 Juniper...

CVE-2021-34775: Buffer Copy without Checking Size of Input

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

PT-2021-20656

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 220 Series Smart Switches affected versions not specified Description: Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation. An unauthenticated, adjacent attacker could execute code on t...