Security Bulletin: Jupyter vulnerabilities affect IBM Spectrum Conductor 2.3 and IBM Spectrum Conductor with Spark 2.2.1

Summary There are multiple vulnerabilities in the Jupyter notebook used by IBM Spectrum Conductor with Spark 2.2.1 and IBM Spectrum Conductor 2.3.0. IBM Spectrum Conductor has addressed the applicable CVEs. Vulnerability Details CVE-ID: CVE-2019-9644 Description: Jupyter Notebook could allow a...

Rockwell Automation DeviceLink - mini to conductor 1485D-A1M5-C Discrete I/O

Binary data 752713.prm...

Rockwell Automation DeviceLink - micro to conductor 1485D-A1F5-C Discrete I/O

Binary data 752723.prm...

Rockwell Automation DeviceLink - conductor to mini 1485D-A3C3-N4 Discrete I/O

Binary data 752716.prm...

Rockwell Automation DeviceLink - mini(1f) to conductor(5m) 1485D-A1FM5-C5 Discrete I/O

Binary data 752729.prm...

Rockwell Automation DeviceLink - mini to conductor 1485D-A2M5-C Discrete I/O

Binary data 752714.prm...

Rockwell Automation DeviceLink - mini to conductor 1485D-A3M5-C Discrete I/O

Binary data 752715.prm...

Security Bulletin: A vulnerability in Apache Spark affects multiple IBM Spectrum Conductor versions

Summary A vulnerability exists in Apache Spark versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1, impacts multiple IBM Spectrum Conductor versions which integrate these Apache Spark versions. Apache Spark versions 2.2.3 or newer and 2.3.2 or newer provide a fix for this vulnerability...

Verifone Verix Multi-app Conductor Buffer Overflow Vulnerability

Verifone Verix Multi-app Conductor is a tool from Verifone USA that supports terminal access to multiple Verifone applications. A buffer overflow vulnerability exists in Verifone Verix Multi-app Conductor version 2.7. An attacker could exploit this vulnerability to execute arbitrary code...

CVE-2019-10060

The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability...

Buffer overflow

The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability...

CVE-2019-10060

The CVE-2019-10060 issue affects Verix Multi-app Conductor for Verifone Verix (version 2.7). The vulnerability is a buffer overflow in a configuration key value that enables arbitrary code execution and requires the attacker to download files to the device. Several connected sources (Red Hat, CNV...

CVE-2019-10060

The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability...

CVE-2019-10060: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Conductor

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ versions 8 used by IBM Spectrum Conductor with Spark 2.2.0, 2.2.1 and IBM Spectrum Conductor 2.3.0. IBM Spectrum Conductor has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the...

The vulnerability in the web interface of software for Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the software web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server lies in insufficiently checking incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of...

CVE-2019-1679 Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability

A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to trigger an HTTP request from an affected server to an arbitrary host. This type of attack ...

CVE-2019-1679

Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server (VCS) REST API are affected by CVE-2019-1679 due to insufficient access controls, enabling an authenticated, remote attacker to trigger an HTTP request from the vulnerable server to an arbitra...

CVE-2019-1679 Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability

A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to trigger an HTTP request from an affected server to an arbitrary host. This type of attack ...

CVE-2019-1679: Server-Side Request Forgery (SSRF)

A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server VCS Software could allow an authenticated, remote attacker to trigger an HTTP request from an affected server to an arbitrary host. This type of attack ...