PT-2020-4439

Name of the Vulnerable Software and Affected Versions: Cisco Aironet Access Points APs Software affected versions not specified Description: The issue is related to insufficient input validation in the Ethernet packet handling of the software. An unauthenticated, adjacent attacker could cause a...

CVE-2020-15417

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. A crafted...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of URLs. The issue results from th...

Stack overflow

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2019-19163: Improper Input Validation

A Vulnerability in the firmware of COMMAX WallPadCDP-1020MB allow an unauthenticated adjacent attacker to execute arbitrary code, because of a using the old version of MySQL...

PT-2020-2680

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the web-based user interface of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass access control restrictions on an affected...

PT-2020-5393

Name of the Vulnerable Software and Affected Versions Bluetooth BR/EDR Core Specification versions prior to v5.2 Description The issue concerns a flaw in the authentication procedure of the Bluetooth BR/EDR protocol, allowing an unauthenticated, adjacent attacker to impersonate a Bluetooth BR/EDR...

PT-2020-1954

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Client for MacOS affected versions not specified Description A vulnerability in the multicast DNS mDNS protocol configuration could allow an unauthenticated adjacent attacker to obtain sensitive information about the devic...

PT-2020-13000

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Services Platform affected versions not specified Description The issue concerns the redundancy host service RdcyHost.exe not validating supplied identifiers. This could allow an unauthenticated, adjacent attack...

CVE-2019-15243: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15245: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-1878: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the Cisco Discovery Protocol CDP implementation for the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, adjacent attacker to inject arbitrary shell commands that are executed by the device. The vulnerability is due to...

CVE-2019-1848: Exposure of Resource to Wrong Sphere

A vulnerability in Cisco Digital Network Architecture DNA Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability is due to insufficient access restriction to ports necessary for system operation. An attacker could...

PT-2019-2198

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers affected versions not specified Description A vulnerability in the Multiprotocol Label Switching MPLS Operations, Administration, and Maintenance OAM implementation...

CVE-2019-1696: Uncontrolled Resource Consumption

Multiple vulnerabilities in the Server Message Block SMB Protocol preprocessor detection engine for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service DoS condition. For more information about these vulnerabilities,...

CVE-2019-1796: Improper Input Validation

A vulnerability in the handling of Inter-Access Point Protocol IAPP messages by Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability exist because the software improperly validates input on field...

PT-2019-1983

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.2.170.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.5.150.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.8.100.0 Description A vulnerability in...

PT-2019-2129

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.5140.0 Description A vulnerability in the Secure Shell SSH server implementation could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device. T...

PT-2019-1984

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.2.170.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.5.150.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.8.100.0 Description A vulnerability in...

PT-2019-1707

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A vulnerability in the Cluster Management Protocol CMP processing code could allow an unauthenticated, adjacent attacker to trigger a denial of service Do...