PT-2021-3985

Name of the Vulnerable Software and Affected Versions Cisco Intersight Virtual Appliance affected versions not specified Description The issue is related to insufficient access control in the Cisco Intersight Virtual Appliance, which could allow an unauthenticated, adjacent attacker to access...

PT-2021-3952

Name of the Vulnerable Software and Affected Versions Cisco Intersight Virtual Appliance affected versions not specified Description The issue is related to insufficient restrictions for IPv4 or IPv6 packets received on the external management interface, allowing an unauthenticated, adjacent...

CVE-2021-1595: Missing Release of Memory after Effective Lifetime

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP implementation for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service DoS condition on an affected device. These...

Command injection

WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors...

PT-2021-2977

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance 8000 Series IP Cameras affected versions not specified Description The issue is related to the Cisco Discovery Protocol implementation, which lacks proper checks when processing messages. This allows an unauthenticated...

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When parsing the...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoin...

CVE-2020-27864: Improper Neutralization of Special Elements used in a Command

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP...

CVE-2020-27873: Improper Access Control

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 8...

PT-2020-5081

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance 8000 Series IP Cameras affected versions not specified Description A vulnerability in the Cisco Discovery Protocol implementation could allow an unauthenticated, adjacent attacker to execute arbitrary code on an affect...

CVE-2020-3487: Improper Input Validation

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

PT-2020-4170

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers affected versions not specified Description: The issue is related to insufficient validation of CAPWAP packets in the Control and Provisioning of Wireless Access Points...

PT-2020-4166

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers affected versions not specified Description: The issue is related to insufficient validation of CAPWAP packets in the Control and Provisioning of Wireless Access Points...

PT-2020-5116

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers affected versions not specified Description A vulnerability in the software could allow an unauthenticated, adjacent attacker to send ICMPv6 traffic prior to the...

CVE-2020-3493: Improper Input Validation

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

PT-2020-4167

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers affected versions not specified Description: The issue is related to insufficient validation of CAPWAP packets in the Control and Provisioning of Wireless Access Points...

PT-2020-4169

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers affected versions not specified Description: The issue is related to insufficient validation of CAPWAP packets in the Control and Provisioning of Wireless Access Points...

CVE-2020-3497: Improper Input Validation

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

PT-2020-4439

Name of the Vulnerable Software and Affected Versions: Cisco Aironet Access Points APs Software affected versions not specified Description: The issue is related to insufficient input validation in the Ethernet packet handling of the software. An unauthenticated, adjacent attacker could cause a...