EUVD-2015-0780

Malware in sbrugna...

EUVD-2020-18714

Malware in sbrugna...

EUVD-2015-4331

Malware in sbrugna...

We Don’t Just Patch – We Hack

We Don’t Just Patch – We Hack By Trellix · February 1, 2023 This blog was written by Douglas McKee If you have read any security advisories, technology news articles or even our very own Bug Report, you have continually been bombarded with the message to patch, patch, patch! Patching is critical ...

CVE-2022-20717

A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cause an affected device to run out of memory, resulting in a denial of service DoS condition. This vulnerability is due to insufficient memory management when an affected device...

Cisco SD-WAN vEdge Router Signature Verification

The vulnerability of the signature verification function in Cisco SD-WAN vEdge Router software is related to errors in verifying the cryptographic signatures. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Cisco SD-WAN products buffer error vulnerabilities

The Cisco SD-WAN vEdge is a router from Cisco, Inc. that provides basic WAN and security and multi-cloud capabilities for Cisco SD-WAN solutions. This device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions.Cisco SD-WAN vManage is software from Cisco that...

Authorization

A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability is due to incorrect authorization enforcement on an affected system. An attacker could exploit this...

CVE-2020-26084 Cisco Edge Fog Fabric Resource Exposure Vulnerability

A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability is due to incorrect authorization enforcement on an affected system. An attacker could exploit this...

CVE-2020-26084 Cisco Edge Fog Fabric Resource Exposure Vulnerability

A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability is due to incorrect authorization enforcement on an affected system. An attacker could exploit this...

CVE-2020-26084: Exposure of Resource to Wrong Sphere

A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability is due to incorrect authorization enforcement on an affected system. An attacker could exploit this...

Cisco Edge Fog Fabric Authorization Issues Vulnerability

Cisco Edge Fog Fabric EFF is an open architecture IoT platform for industrial customers. An authorization issue vulnerability exists in the REST API for Cisco Edge Fog Fabric versions prior to 1.7.4. The vulnerability stems from a failure of authorization enforcement to be correct. An attacker ca...

PT-2020-4663

Name of the Vulnerable Software and Affected Versions Cisco Edge Fog Fabric affected versions not specified Description A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected devic...

Cisco SD-WAN vEdge 5000 Series Routers and SD-WAN vEdge Cloud Router Denial of Service Vulnerability

Cisco SD-WAN vEdge 5000 Series Routers are Cisco's SD-WAN solution routing devices. A denial-of-service vulnerability in the deep packet inspection DPI engine in Cisco SD-WAN vEdge 5000 Series Routers and SD-WAN vEdge Cloud Router, which stems from the program's failure to properly handle FTP...

CVE-2020-3369

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this...

CVE-2015-4308

The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuu43968...

Design/Logic Flaw

The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuu43968...

Cisco Edge 340 Series Digital Media Player File Viewing Vulnerability

The Cisco Edge 340 Series Digital Media Player is a digital media playback application device. A security vulnerability exists in the Cisco Edge 340 Series Digital Media Player that allows a remote, authenticated user to configure the export function using the WEB graphical user interface to view...

CVE-2015-4308: Exposure of Sensitive Information to an Unauthorized Actor

The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuu43968...

PT-2015-6516

Name of the Vulnerable Software and Affected Versions Cisco Edge Bluebird Operating System version 1.2 Description The webGUI configuration-export feature allows remote authenticated users to obtain sensitive information via unspecified vectors. Recommendations For Cisco Edge Bluebird Operating...