Lucene search
+L

1226 matches found

Prion
Prion
•added 2023/07/25 6:15 p.m.•32 views

Authentication flaw

There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packe...

5.8CVSS9.2AI score0.00115EPSS
SaveExploits0References1Affected Software5
Vulnrichment
Vulnrichment
•added 2023/07/25 5:07 p.m.•36 views

CVE-2023-2626 Authentication Bypass in OpenThread Boarder Router devices

There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packe...

7.5CVSS7.8AI score0.00115EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/07/25 5:07 p.m.•50 views

CVE-2023-2626 Authentication Bypass in OpenThread Boarder Router devices

There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packe...

7.5CVSS9.3AI score0.00115EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/25 5:07 p.m.•83 views

CVE-2023-2626

CVE-2023-2626 (OpenThread border router) : Authentication bypass allowing unauthenticated nodes to craft radio frames via a fixed “Key ID Mode 2” encryption key, enabling arbitrary IPv6 packets to be sent to and from devices on the LAN through the Thread network. Documented impact: bypass of secu...

8.8CVSS8.4AI score0.00115EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/25 12:00 a.m.•12 views

PT-2023-20568 · Unknown · Openthread

Name of the Vulnerable Software and Affected Versions: OpenThread border router devices and implementations affected versions not specified Description: The issue is an authentication bypass vulnerability that allows unauthenticated nodes to craft radio frames using a special mode called Key ID...

8.8CVSS7.2AI score0.00115EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/25 12:00 a.m.•2 views

CVE-2023-2626: Improper Authentication

There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packe...

8.8CVSS7.9AI score0.00115EPSS
SaveExploits0References3
Schneier on Security
Schneier on Security
•added 2023/07/06 11:03 a.m.•22 views

Belgian Tax Hack

Heres a fascinating tax hack from Belgium listen to the details here, episode 484 of "No Such Thing as a Fish," at 28:00. Basically, its about a music festival on the border between Belgium and Holland. The stage was in Holland, but the crowd was in Belgium. When the copyright collector came...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/07/06 12:00 a.m.•12 views

PT-2023-7028 · Atos · Atos Unify Openscape Branch +2

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Session Border Controller versions through V10 R3.01.03 Atos Unify OpenScape Branch affected versions not specified Atos Unify OpenScape BCF affected versions not specified Description: The issue allows execution of...

9.8CVSS9.6AI score0.03901EPSS
SaveExploits3References9
NCSC
NCSC
•added 2023/06/22 12:00 a.m.•18 views

Vulnerability fixed in Juniper JunOS

Juniper has fixed a vulnerability in JunOS. A unauthenticated malicious person could exploit the vulnerability to cause cause a denial-of-service. The vulnerability is in the way BGP traffic is handled. In specific circumstances, a BGP update can result in the disconnection of the connection...

7.5CVSS6.9AI score0.00645EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2023/06/22 12:00 a.m.•16 views

The vulnerability of the routing protocol demon pdrd in JunOS and JunOS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the routing protocol demon rpd in JunOS and JunOS Evolved is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted BGP request remotely...

7.8CVSS7.1AI score0.00645EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2023/06/21 5:15 p.m.•14 views

CVE-2023-0026

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When a BGP update message is received over an established BGP session, and that messa...

7.5CVSS5.9AI score0.00645EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/06/16 12:00 a.m.•13 views

The vulnerability of the Linux operating system’s kernel, which allows a hacker to gain access to protected information

The vulnerability of the Linux operating system’s kernel is related to errors in cross-border deletion of critical data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

5.5CVSS6.5AI score0.00264EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
•added 2023/06/13 12:00 a.m.•16 views

The vulnerability of the BGP routing protocol on Juniper Networks’ Junos OS and Junos OS Evolved systems allows a attacker to cause a service failure.

The vulnerability of the BGP routing protocol in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.1AI score0.00649EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/06/13 12:00 a.m.•21 views

The vulnerability of the software for the Border Gateway Protocol (BGP) of Juniper Networks’ Junos OS and Junos OS Evolved operating systems, which allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol Software BGP in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability allows a malicious actor to send specially crafted BGP packets, thereby causing...

7.8CVSS7.2AI score0.00621EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/06/09 12:00 a.m.•13 views

The vulnerability of the routing protocol BGP implementation in Juniper Networks’ Junos OS and Junper Networks’ Junos OS Evolved systems allows a attacker to cause service interruptions.

The vulnerability of the Border Gateway Protocol BGP implementation in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotel...

7.8CVSS7.2AI score0.00616EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/05/19 12:00 a.m.•18 views

The vulnerability of the bgpd software module for implementing network routing on Unix-like systems allows a hacker to cause service interruptions.

The vulnerability of the bgpd software module for implementing routing on Unix-like systems is related to the issue where an operation is executed outside the buffer in memory when processing BGP OPEN messages with a length of one octet or word. Exploiting this vulnerability allows a remote...

7.8CVSS7.2AI score0.02125EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/05/19 12:00 a.m.•16 views

The vulnerability of the `bgp_openOptionParse()` function in the bgpd daemon, a software component for implementing routing on Unix-like systems, allows a attacker to cause a service failure.

The vulnerability of the bgpopenOptionParse function in the bgpd daemon, a software component for implementing routing protocols on Unix-like systems, is related to the issue of the operation going beyond the buffer during the processing of BGP OPEN messages with a value of 0xff. Exploiting this...

7.8CVSS7.1AI score0.01983EPSS
SaveExploits0References3Affected Software2
Microsoft CVE
Microsoft CVE
•added 2023/05/17 7:00 a.m.•7 views

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.

...

7.5CVSS7.5AI score0.02152EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2023/05/11 1:57 a.m.•9 views

SUSE CVE-2023-31489

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgpcapabilityllgr function...

5.5CVSS6.9AI score0.01027EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2023/05/09 9:51 a.m.•30 views

frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service

A vulnerability was found in FRRouting. This issue occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c. An out-of-bounds read in the BGP daemon may lead to a segmentation fault and a denial of service...

9.1CVSS5.7AI score0.02212EPSS
SaveExploits1References4
Rows per page
Query Builder