Lucene search
+L

2174 matches found

BDU FSTEC
BDU FSTEC
•added 2021/04/14 12:00 a.m.•17 views

The vulnerability of the command-line interface (CLI) of the JunOS operating system for routers of the EX2300 and EX3400 series, which allows a attacker to cause service interruptions.

The vulnerability of the command-line interface CLI of the JunOS operating system for EX2300 and EX3400 routers is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.5CVSS5.9AI score0.00339EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2021/04/13 4:15 p.m.•11 views

CVE-2021-21730

A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0TY.T6...

9.8CVSS7.3AI score0.01002EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/13 12:00 a.m.•1 views

PT-2021-14741

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H168N version 3.5.0 TY.T6 Description The issue is related to improper access control, allowing an attacker to exploit it and access the Command Line Interface CLI using brute force attacks. Recommendations For version 3.5.0 TY.T6,...

9.8CVSS0.01002EPSS
SaveExploits0References3
Fedora
Fedora
•added 2021/04/06 1:04 a.m.•46 views

[SECURITY] Fedora 33 Update: mediaconch-18.03.2-17.fc33

MediaConch is an implementation checker, policy checker, reporter, and fixer that targets preservation-level audiovisual files specifically Matroska, Linear Pulse Code Modulation LPCM and FF Video Codec 1 FFV1. This project is maintained by MediaArea and funded by PREFORMA. This package includes...

7.5CVSS3.4AI score0.04238EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2021/04/06 12:00 a.m.•52 views

Fedora: Security Advisory for mediaconch (FEDORA-2021-3b67623d93)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.04238EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•15 views

The vulnerability of the CLI component in Cisco IOS XE routers for Cisco IOS XE SD-WAN allows a attacker to gain access to the basic operating system with superuser privileges.

The vulnerability of Cisco IOS XE operating system routers in Cisco IOS XE SD-WAN devices exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to the basic operating system with superuser privileges...

6.8CVSS6.7AI score0.00592EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•21 views

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface allows attackers to compromise the integrity of protected information.

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a attacker to compromise the integrity of the protected information...

4.6CVSS6.6AI score0.0023EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•14 views

The vulnerability of the command-line interface of Cisco Aironet Access Point microprogramming software allows a attacker to access, modify, add, or delete data.

The vulnerability of the command-line interface of Cisco Aironet Access Point software relates to deficiencies in the system’s controlled area segmentation. Exploiting this vulnerability could allow an attacker to access, modify, add, or delete data...

4.6CVSS6.1AI score0.0023EPSS
SaveExploits0References2Affected Software9
BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•16 views

The vulnerability of the Cisco IOS XE SD-WAN’s command-line interface allows a hacker to elevate their privileges to the root level.

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface is related to resource management errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the underlying operating system...

5.2CVSS7.1AI score0.00275EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/04/05 12:00 a.m.•17 views

The vulnerability of the command-line interface (CLI) of Cisco IOS XE and Cisco IOS operating systems allows a attacker to obtain the password for the Common Industrial Protocol (CIP) and reconfigure the device.

The vulnerability of the command-line interface CLI of Cisco IOS XE and Cisco IOS operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to obtain the password for the Common Industrial Protocol CIP and reconfigure the...

7.8CVSS7.1AI score0.0022EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
•added 2021/03/30 12:00 a.m.•23 views

Aruba Instant Arbitrary File Modification Vulnerability

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant suffers from an arbitrary file modification vulnerability that can be exploited by an attacker via a command line interface to overwrite arbitrary files with content under their control...

8.5CVSS6.9AI score0.00918EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/30 12:00 a.m.•2 views

PT-2021-7726

Name of the Vulnerable Software and Affected Versions Aruba Instant versions 6.5.4.17 and below Aruba Instant versions 8.3.0.13 and below Aruba Instant versions 8.5.0.10 and below Aruba Instant versions 8.6.0.4 and below Description A remote execution of arbitrary commands issue exists due to lac...

9CVSS0.02843EPSS
SaveExploits0References9
CNVD
CNVD
•added 2021/03/30 12:00 a.m.•22 views

Aruba Instant Command Injection Vulnerability (CNVD-2021-26046)

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

9CVSS7.9AI score0.02722EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/29 12:00 a.m.•16 views

Aruba Access Points 操作系统命令注入漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

9CVSS6.1AI score0.02722EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/03/29 12:00 a.m.•17 views

Aruba Access Points 命令注入漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. A command injection vulnerability exists in the command line interface of Aruba Instant, which can be exploited by an attacker to execute arbitrary commands in the underlying operating system...

9CVSS6.1AI score0.02722EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/03/29 12:00 a.m.•20 views

Aruba Access Points 输入验证错误漏洞

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant suffers from an arbitrary file modification vulnerability that can be exploited by an attacker via a command line interface to overwrite arbitrary files with content under their control...

8.5CVSS5.9AI score0.00918EPSS
SaveExploits0References5
OSV
OSV
•added 2021/03/24 9:15 p.m.•12 views

CVE-2021-1281

A vulnerability in CLI management in Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system as the root user. This vulnerability is due to the way the software handles concurrent CLI sessions. An attacker could exploit this vulnerabilit...

6.7CVSS6.7AI score0.00275EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/24 8:15 p.m.•8 views

CVE-2021-1383

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these...

6.7CVSS6.8AI score0.00592EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/03/24 4:00 p.m.•15 views

CVE-2021-1434

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system. This vulnerability is due to insufficient validation of the parameters of a specific CLI command. An attacker could exploit this...

6.6CVSS6.5AI score0.0023EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/24 12:00 a.m.•0 views

PT-2021-2494

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE SD-WAN Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the command-line interface of the software, allowing an authenticated, local attacker to condu...

4.7CVSS0.00313EPSS
SaveExploits0References5
Rows per page
Query Builder