The vulnerability of the Meraki component of the Cisco IOS XR operating system’s microprogramming software for Cisco Catalyst 9200 and Cisco Catalyst 9300 devices allows attackers to increase their privileges.

The vulnerability of the Meraki component of the Cisco IOS XR operating system’s microprogramming software for Cisco Catalyst 9200 and Cisco Catalyst 9300 is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of Cisco IOS XE operating systems on Cisco Catalyst 9300 switches arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of Cisco IOS XE-enabled Cisco Catalyst 9300 switches exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

The vulnerability of Microprogramming Software in Cisco Business 150, Cisco Business 151 Mesh Extenders, and Cisco Catalyst 9100 arises from the ability to write beyond the buffer boundaries, allowing attackers to cause service interruptions.

The vulnerability of Microprogrammed Software in Cisco Business 150, Cisco Business 151 Mesh Extenders, and Cisco Catalyst 9100 is related to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Samba AD DC admin tool samba-tool sends passwords in cleartext

Description Active Directory allows passwords to be set and changed over LDAP. Microsoft's implementation imposes a restriction that this may only happen over an encrypted connection, however Samba does not have this restriction currently. Samba's samba-tool client tool likewise has no restrictio...

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

CVE-2023-20082

Cisco IOS XE Software for Cisco Catalyst 9300 Series switches contains a Secure Boot bypass (CVE-2023-20082). The issue stems from errors when retrieving the public release key used for image signature verification, allowing an authenticated, level-15 privileged user or a physically compromising ...

CVE-2023-20082: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

Cisco IOS XE Software Privilege Escalation Vulnerability

A vulnerability in the Cloud Management for Catalyst migration feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Cisco IOS XE Meraki migration featur...

Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

PT-2023-2191 · Cisco · Cisco Catalyst 9100 +2

Name of the Vulnerable Software and Affected Versions: Cisco Business 150 versions affected versions not specified Cisco Business 151 Mesh Extenders versions affected versions not specified Cisco Catalyst 9100 versions affected versions not specified Description: The issue is related to a buffer...

PT-2023-2222 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches versions prior to 16.11.1 Description: A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker...

Malicious code in clientcore-catalyst-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6664041454d45a2f2b01cb74cb0c4721a9dcafb0080f39a8f4990d700aa9746f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clientcore-models-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4f8608c64c0d2d06f8bf729f6b9a52295b62d6a69f5da36891c2fbe883b2e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-180 Malicious code in clientcore-catalyst-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6664041454d45a2f2b01cb74cb0c4721a9dcafb0080f39a8f4990d700aa9746f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-181 Malicious code in clientcore-models-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4f8608c64c0d2d06f8bf729f6b9a52295b62d6a69f5da36891c2fbe883b2e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview clientcore-catalyst-businesslogic is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable...