Lucene search
+L

266 matches found

NVD
NVD
added 2023/03/23 5:15 p.m.27 views

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

6.8CVSS6.4AI score0.00375EPSS
Exploits0References1
OSV
OSV
added 2023/03/23 5:15 p.m.6 views

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

6.8CVSS6.6AI score0.00375EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/03/23 12:0 a.m.14 views

CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

6.1CVSS7.3AI score0.00375EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/03/22 11:0 p.m.9 views

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

6.8CVSS6.7AI score0.00375EPSS
Exploits0References2
Cisco
Cisco
added 2023/03/22 4:0 p.m.78 views

Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

6.1CVSS6.5AI score0.00375EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/22 12:0 a.m.7 views

PT-2023-2222 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches versions prior to 16.11.1 Description: A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker...

6.8CVSS6.7AI score0.00375EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.4 views

SUSE CVE-2006-4093

Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a denial of service crash related to the "HID0 attention enable on PPC970 at boot time."...

4.9CVSS6.3AI score0.00472EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:6 a.m.3 views

SUSE CVE-2019-19049

A memory leak in the unittestdataadd function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service memory consumption by triggering offdtunflattentree failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because...

1.6CVSS7.3AI score0.03551EPSS
Exploits0References14
SUSE CVE
SUSE CVE
added 2023/02/15 3:48 a.m.4 views

SUSE CVE-2021-3997

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...

5.5CVSS8.3AI score0.01561EPSS
Exploits1References52
Citrix
Citrix
added 2022/12/13 12:0 a.m.9 views

Low PVS boot throughput

A customer observed that PVS target device boot statistics, viewed in status tray tool, showed low throughput and a long boot time on existing target devices. Testing a new vdisk, minimal install with just PVS target device software and not domain joined, showed much quicker boot time and higher...

7.1AI score
Exploits0
OSV
OSV
added 2022/12/12 1:15 p.m.6 views

CVE-2022-37905

Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system...

8.8CVSS6.1AI score0.00747EPSS
Exploits0References1
OSV
OSV
added 2022/12/12 1:15 p.m.4 views

CVE-2022-37904

Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system...

8.8CVSS6.1AI score0.00691EPSS
Exploits0References1
CVE
CVE
added 2022/10/10 8:43 p.m.126 views

CVE-2022-20944

CVE-2022-20944 concerns Cisco IOS XE for Catalyst 9200 Series Switches . It exploits an improper check in the image verification that occurs during system boot, allowing an unauthenticated, physical attacker to load unsigned software and potentially boot malicious code or bypass the verification ...

6.8CVSS6.5AI score0.00209EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/09/29 12:0 a.m.114 views

Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution (cisco-sa-ios-xe-cat-verify-D4NEQA6q)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the software image verification functionality of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, physical attacker to execute unsigned...

6.8CVSS6.8AI score0.00209EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/08/23 8:15 p.m.4 views

CVE-2021-3997

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...

5.5CVSS6.9AI score0.01561EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2022/08/23 12:0 a.m.61 views

CVE-2021-3997

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...

5.5CVSS6.4AI score0.01561EPSS
Exploits1
CVE
CVE
added 2022/08/23 12:0 a.m.415 views

CVE-2021-3997

CVE-2021-3997 affects systemd with an uncontrolled recursion in systemd-tmpfiles that can cause a denial of service at boot when many nested /tmp directories are created. Connected documents confirm the issue and indicate remediation through updated systemd packages (e.g., Mariner cites versions

5.5CVSS5.4AI score0.01561EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2022/08/23 12:0 a.m.35 views

CVE-2021-3997

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...

5.8AI score0.01561EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2022/08/15 1:15 p.m.2 views

CVE-2022-33989

dproxy-nexgen aka dproxy nexgen uses a static UDP source port selected randomly only at boot time in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks...

5.3CVSS5.9AI score0.00823EPSS
Exploits1References4
OSV
OSV
added 2022/04/15 3:15 p.m.6 views

CVE-2022-20731

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service DoS condition. For...

6.8CVSS6.6AI score0.00235EPSS
Exploits0References1
Rows per page
Query Builder