EUVD-2018-7269

Malware in sbrugna...

EUVD-2019-10396

Malware in sbrugna...

The vulnerability of Cisco Remote PHY device’s software lies in the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands in the Linux shell with root privileges.

The vulnerability of Cisco Remote PHY device software relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands in the Linux shell with root privileges...

CVE-2019-1839

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attack...

Input validation

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attack...

Cisco Remote PHY Software Resource Management Error Vulnerability

Cisco Remote PHY Software is a digital fiber-based DOCSIS solution from Cisco. The program uses Ethernet PON EPON and metro network as the transmission network. A resource management error vulnerability exists in the IPv4 fragmentation function in Cisco Remote PHY Software. A remote attacker coul...

CVE-2018-15391

A vulnerability in certain IPv4 fragment-processing functions of Cisco Remote PHY Software could allow an unauthenticated, remote attacker to impact traffic passing through a device, potentially causing a denial of service DoS condition. The vulnerability is due to the affected software not...

CVE-2018-15391

Cisco CVE-2018-15391 concerns Cisco Remote PHY Software and a vulnerability in IPv4 fragment-processing functions. An unauthenticated, remote attacker could send malformed IPv4 traffic to an affected device, exploiting improper validation/calculation of certain numerical values in IPv4 packets to...