CVE-2024-20312

A vulnerability in the Intermediate System-to-Intermediate System IS-IS protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input...

CVE-2024-20276

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this...

CVE-2024-20276

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this...

CVE-2024-20276

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this...

CVE-2024-20276

CVE-2024-20276 describes a DoS vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches. The issue stems from improper handling of process-switched traffic, which could allow an unauthenticated, adjacent attacker to send crafted traffic and cause the affected device to reload, ...

Cisco IOS XE Software OSPFv2 Denial of Service Vulnerability

A vulnerability in the OSPF version 2 OSPFv2 feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to improper validation of OSPF updates that...

CVE-2024-21865

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell...

CVE-2024-29071

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may change the system settings...

CVE-2024-28041

HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary command...

CVE-2024-21865

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell...

CVE-2024-21865

The HGW BL1500HM router (firmware 002.001.013 and earlier) is affected by CVE-2024-21865 due to use of weak credentials. An adjacent unauthenticated attacker can connect via SSH and obtain a shell. Remediation: update firmware to 002.001.019 (per JVN RedHat/RH entries). The impact is limited to c...

CVE-2024-29071

CVE-2024-29071 affects HGW BL1500HM (ver. ≤002.001.013). The issue is use of weak credentials allowing a network-adjacent, unauthenticated attacker to change system settings. JVN detects multiple vulnerabilities in the same device family and notes the vendor fixed these issues in 002.001.019; Red...

CVE-2024-28041

CVE-2024-28041 affects the home gateway HGW BL1500HM, with vulnerable versions 002.001.013 and earlier. The issue is described as a network-adjacent, unauthenticated command execution vulnerability (command injection risk). Several connected sources corroborate the vulnerability and identify the ...

CVE-2024-21824

Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the...

Cisco IP Phones 7800 and 8800 Series Cisco Discovery Protocol Stack Overflow (CVE-2022-20968)

A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device. This vulnerability is due to insufficient input validation of received Cisco...

Cisco IP Phones Remote Code Execution and Denial of Service (CVE-2020-3111)

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discove...

Race condition

A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the line card network processor to reset, resulting in a denial of service DoS condition. This vulnerability is due to the incorrect handling of specific Ethernet...

CVE-2024-20319

Cisco IOS XR Software contains a UDP forwarding code vulnerability that can allow an unauthenticated, adjacent attacker to bypass management plane protection and reach the SNMP server when SNMP is used with management plane protection. The issue arises from incorrect UDP forwarding when handling ...

Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass Vulnerability

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

CVE-2024-23717

In accesssecureservicefromtempbond of btmsec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...