CVE-2015-7792: Undefined Security Weakness

Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors...

PT-2015-7614

Name of the Vulnerable Software and Affected Versions Corega CG-WLBARGS devices affected versions not specified Description The issue allows remote attackers to perform administrative operations. Recommendations At the moment, there is no information about a newer version that contains a fix for...

PT-2015-7615

Name of the Vulnerable Software and Affected Versions Corega CG-WLBARAGM devices affected versions not specified Description The issue allows remote attackers to trigger outbound network traffic via unspecified vectors, as the devices provide an open proxy service. Recommendations At the moment,...

PT-2015-7616

Name of the Vulnerable Software and Affected Versions Corega CG-WLNCM4G devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, specifically traffic amplification, by sending crafted queries to an open DNS resolver. Recommendations At th...

CG-WLBARAGM may behave as an open proxy

Overview CG-WLBARAGM provided by Corega Inc is a wireless LAN router. CG-WLBARAGM contains an issue where it may behave as an open proxy. Akihiro Nakajima of NTT Communications reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#51349622: CG-WLBARGS does not properly perform authentication

CG-WLBARGS provided by Corega Inc is a wireless LAN router. CG-WLBARGS does not properly perform authentication. Impact An attacker who can access the product may log in with administrative privileges. As a result, an arbitrary administrative operations may be executed. Solution Apply a Workaroun...

JVN#50775659: CG-WLBARAGM may behave as an open proxy

CG-WLBARAGM provided by Corega Inc is a wireless LAN router. CG-WLBARAGM contains an issue where it may behave as an open proxy. Impact The device may be leveraged as a proxy server to conduct cyber attacks. Solution Apply a Workaround The following workaround may mitigate the affects of this...

JVN#51250073: CG-WLNCM4G may behave as an open resolver

CG-WLNCM4G provided by Corega Inc is a network camera. CG-WLNCM4G contains an issue where it may behave as an open resolver. Impact The device may be leveraged for use in a DNS amplification attack and unknowingly become a part of a DDoS attack. Solution Do not use CG-WLNCM4G As of December 25,...

CVE-2015-6362

CVE-2015-6362 affects Cisco Connected Grid Network Management System (CG-NMS) web GUI in versions 3.0(0.35) and 3.0(0.54). The issue arises from insufficient authorization controls, allowing remote authenticated users in the Monitor-Only role to bypass restrictions and modify configuration. The r...

CVE-2014-0762

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition...

CVE-2014-0761

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service infinite loop or process crash via a crafted TCP packet...

Design/Logic Flaw

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows physically proximate attackers to cause a denial of service infinite loop or process crash via crafted input over a serial line...

Design/Logic Flaw

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service infinite loop or process crash via a crafted TCP packet...

CVE-2014-0761

The CVE-2014-0761 vulnerability affects CG Automation’s ePAQ-9410 Substation Gateway DNP3 driver. The issue is improper input validation in the DNP3 driver, where a crafted TCP packet can cause an infinite loop or process crash, leading to a denial of service. Affects all versions of the ePAQ-941...

CVE-2014-0761 CG Automation ePAQ-9410 Substation Gateway Improper Input Validation

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service infinite loop or process crash via a crafted TCP packet...

CVE-2014-0762

The CVE-2014-0762 issue affects the CG Automation DNP3 driver used in the ePAQ-9410 Substation Gateway. The root cause is improper input validation that can cause an infinite loop, crashing the process and requiring a manual restart, affecting availability. The IP-based path could be exploited re...

PT-2014-3823

Name of the Vulnerable Software and Affected Versions CG Automation ePAQ-9410 Substation Gateway affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop or process crash, by sending a crafted TCP packet to the DNP3...

CVE-2014-0761: Improper Input Validation

The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service infinite loop or process crash via a crafted TCP packet...

PT-2014-3824

Name of the Vulnerable Software and Affected Versions CG Automation ePAQ-9410 Substation Gateway affected versions not specified Description The issue allows physically proximate attackers to cause a denial of service, resulting in an infinite loop or process crash, via crafted input over a seria...

CVE-2014-0762: Improper Input Validation

The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition...