228 matches found
Design/Logic Flaw
Multiple vulnerabilities in Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on...
Design/Logic Flaw
Multiple vulnerabilities in Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on...
CVE-2021-1370
CVE-2021-1370 affects Cisco IOS XR Software on Cisco 8000 Series Routers and NCS540L software images. A vulnerability in a CLI command allows an authenticated, local attacker to escalate privileges to root due to insufficient validation of command line arguments. Exploitation requires a valid acc...
CVE-2021-1136 Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities
Multiple vulnerabilities in Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on...
CVE-2021-1244 Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities
Multiple vulnerabilities in Cisco Network Convergence System NCS 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on...
Multiple Cisco Products Data Forgery Issue Vulnerabilities
The Cisco 8000 Series Router and the Cisco Network Convergence System 540 Series Routers are both router devices from Cisco USA. A data forgery issue vulnerability exists in Cisco IOS XR on multiple Cisco routers. The vulnerability is caused due to an unlocked version of the GRUB bootloader on th...
Multiple Cisco Products Data Forgery Issue Vulnerabilities
The Cisco 8000 Series Router and the Cisco Network Convergence System 540 Series Routers are both router devices from Cisco USA. A data forgery vulnerability exists in Cisco IOS XR on multiple Cisco routers. The vulnerability is due to an unsigned script in the ISO that is verified without...
Denial of Service Vulnerability in LoveFast Router
The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...
Denial of Service Vulnerability in LoveFast Router (CNVD-2021-03424)
The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...
Arbitrary File Download Vulnerability in iKuaiOS
The scope of business of Quanxun Convergence Network Technology Beijing Co., Ltd. includes: Internet information services; technology development, technical services, technical consulting, technology transfer, technology promotion and so on. iKuaiOS has an arbitrary file download vulnerability th...
Denial of Service Vulnerability in AIFUL Router iK-Q80
The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. Denial of service vulnerability exists ...
Go inside the new Azure Defender for IoT including CyberX
In 2020, the move toward digital transformation and Industry 4.0 took on new urgency with manufacturing and other critical infrastructure sectors under pressure to increase operational efficiency and reduce costs. But the cybersecurity model for operational technology OT was already shown to be...
Go inside the new Azure Defender for IoT including CyberX
In 2020, the move toward digital transformation and Industry 4.0 took on new urgency with manufacturing and other critical infrastructure sectors under pressure to increase operational efficiency and reduce costs. But the cybersecurity model for operational technology OT was already shown to be...
Video: Ransomware a Growing Industrial Security Threat
SAN FRANCISCO – Today, Operational Technology OT and Information Technology systems are merging and changing security playbooks. Here at RSA Conference 2020, Waterfall Security‘s CEO and co-founder Lior Frenkel describes the front lines of the convergence. Frenkel maintains that just as more...
The New Year Calls for a Change in the OT Industry’s State of Security
In 2014, a Western European steel mill suffered serious damage from a phishing attack that penetrated its IT and Operational Technology OT networks the software and hardware dedicated to monitoring and controlling physical devices where attackers gained control of plant equipment. In 2018, 74% of...
Infosecurity Europe: Easing the Clash Between IT and Industrial Worlds
LONDON, UK – Information technology and operational technology are like two sides of the same coin. Their objectives are the same, but too often they don’t see eye-to-eye when it comes to priorities, according to cybersecurity experts. Information technology IT teams are tasked with securing and...
RSA Conference 2019: Operational Technology Widens Supply Chain Attack Surfaces
SAN FRANCISCO – Today’s supply chain has evolved, with operational technology OT used in factories increasingly becoming connected and converging with IT systems — introducing new attack vectors. This new reality is vital for companies to understand in the context of risk, according to Dawn...
Cisco Network Convergence System 1000 Series IOS XR Software Information Disclosure Vulnerability
Cisco Network Convergence System 1000 Series is a set of network convergence system of the United States Cisco Cisco. An information disclosure vulnerability exists in the IOS XR Software prior to version 6.5.2 in the Cisco Network Convergence System 1000 Series, which stems from the program's...
CVE-2019-1681
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...
CVE-2019-1681
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of...