CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

CVE-2023-20082

Cisco IOS XE Software for Cisco Catalyst 9300 Series switches contains a Secure Boot bypass (CVE-2023-20082). The issue stems from errors when retrieving the public release key used for image signature verification, allowing an authenticated, level-15 privileged user or a physically compromising ...

CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

Cisco IOS XE Software Privilege Escalation Vulnerability

A vulnerability in the Cloud Management for Catalyst migration feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Cisco IOS XE Meraki migration featur...

PT-2023-2222 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches versions prior to 16.11.1 Description: A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker...

PT-2023-2191 · Cisco · Cisco Catalyst 9100 +2

Name of the Vulnerable Software and Affected Versions: Cisco Business 150 versions affected versions not specified Cisco Business 151 Mesh Extenders versions affected versions not specified Cisco Catalyst 9100 versions affected versions not specified Description: The issue is related to a buffer...

Malicious code in clientcore-models-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4f8608c64c0d2d06f8bf729f6b9a52295b62d6a69f5da36891c2fbe883b2e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-181 Malicious code in clientcore-models-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4f8608c64c0d2d06f8bf729f6b9a52295b62d6a69f5da36891c2fbe883b2e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clientcore-catalyst-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6664041454d45a2f2b01cb74cb0c4721a9dcafb0080f39a8f4990d700aa9746f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-180 Malicious code in clientcore-catalyst-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6664041454d45a2f2b01cb74cb0c4721a9dcafb0080f39a8f4990d700aa9746f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview clientcore-catalyst-businesslogic is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable...

Malicious Package

Overview clientcore-models-catalyst is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

catalystathletics.com Cross Site Scripting vulnerability OBB-3221624

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the system check function in Cisco IOS XE for Cisco Catalyst 9200 Series network devices allows a hacker to execute arbitrary code.

The vulnerability of the Cisco IOS XE software’s network device authentication function on the Cisco Catalyst 9200 series devices is related to improper verification of the cryptographic signature. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the User Datagram Protocol (UDP) implementation in the Cisco IOS XE access point of the Catalyst 9100 model, which is related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the User Datagram Protocol UDP implementation in the Cisco IOS XE access point of the Catalyst 9100 model is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Task fails with "Repository is not compatible with Catalyst Store with fixed block setting enabled"

Challenge A Veeam Backup & Replication job targeting a StoreOnce Repository backed by a Catalyst Store that has Fixed Block Chunking enabled fails with either of the following errors: Repository is not compatible with Catalyst Store with fixed block setting enabled Error:...

The vulnerability in the implementation of the incoming packet processing function on Cisco IOS XR operating systems of the microprogramming-based switching software for Cisco Catalyst 3650, Cisco Catalyst 3850, and Cisco Catalyst 9300 devices arises from errors in processing parameter values related to the length of incoming data. This vulnerability allows an attacker to cause service interruptions.

The vulnerability of the incoming packet processing function in Cisco IOS XR operating systems of Cisco Catalyst 3650, Cisco Catalyst 3850, and Cisco Catalyst 9300 switches is related to errors in processing input data length parameters. Exploiting this vulnerability can allow an attacker to caus...

The vulnerability of the command-line interface (CLI) of Cisco IOS XE operating systems for Cisco Catalyst 9000 Series network devices is related to privilege assignment errors, which allow an attacker to execute arbitrary commands.

The vulnerability of the command-line interface CLI of Cisco IOS XE operating systems for Cisco Catalyst 9000 Series network devices is related to privilege assignment errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the Cisco IOS XE base operating...