CVE-2023-25525

NVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6 packet received on an SVI interface with DMAC/DIPv6 set to the link-local address of the SVI interface may be incorrectly forwarded. A successful exploit may lead to information disclosure...

CVE-2023-25525

NVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6 packet received on an SVI interface with DMAC/DIPv6 set to the link-local address of the SVI interface may be incorrectly forwarded. A successful exploit may lead to information disclosure...

CVE-2023-25525

The CVE-2023-25525 issue affects NVIDIA Cumulus Linux (SVI forwarding path) where a VxLAN-encapsulated IPv6 packet with DMAC/DIPv6 set to the link-local SVI address may be incorrectly forwarded, potentially leading to information disclosure. Affected versions are all prior to 5.6.0; the NVIDIA bu...

NVIDIA Cumulus Linux Access Control Error Vulnerability

NVIDIA Cumulus Linux is a powerful open network operating system from NVIDIA. An access control error vulnerability exists in NVIDIA Cumulus Linux. An attacker could exploit this vulnerability to cause information disclosure...

NVIDIA Cumulus Linux Security Vulnerability

NVIDIA Cumulus Linux is a powerful open network operating system from NVIDIA. A security vulnerability exists in NVIDIA Cumulus Linux. An attacker has exploited the vulnerability to cause a denial of service...

PT-2023-20137 · Nvidia · Nvidia Cumulus Linux

Name of the Vulnerable Software and Affected Versions: NVIDIA Cumulus Linux affected versions not specified Description: The issue concerns the forwarding of VxLAN-encapsulated IPv6 packets in NVIDIA Cumulus Linux. When such a packet is received on an SVI interface with its DMAC/DIPv6 set to the...

PT-2023-5502 · Nvidia · Nvidia Cumulus Linux

Name of the Vulnerable Software and Affected Versions: NVIDIA Cumulus Linux affected versions not specified Description: The issue is related to a vulnerability in the neighmgrd and nlmanager components of NVIDIA Cumulus Linux. An attacker on an adjacent network may cause an uncaught exception by...

Security Bulletin: NVIDIA Cumulus Linux - September 2023

NVIDIA has released a software update for NVIDIA Cumulus Linux. This update addresses security issues that may lead to information disclosure and denial of service. To protect your system, download and install the latest version of NVIDIA Cumulus Linux from the NVIDIA Enterprise Support Portal. G...

CVE-2022-40305

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form...

CVE-2022-40305

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form...

CVE-2022-40305

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form...

Server side request forgery (ssrf)

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form...

CVE-2022-40305

CVE-2022-40305 affects Canto Cumulus up to version 11.1.3. The issue is a Server-Side Request Forgery (SSRF) via the server parameter in the /cwc/login form, enabling internal network enumeration and potential resource overload. Exploitation details are not provided in the connected documents. Re...

CVE-2022-40305

A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login form...

Canto Cumulus 代码问题漏洞

Canto Cumulus is a digital asset management software from Canto designed for client/server systems. A code issue vulnerability exists in versions of Canto Cumulus prior to 11.1.3, which stems from a vulnerability that allows an attacker to spoof a server-side request to enumerate the internal...

PT-2022-25338 · Canto · Canto Cumulus

Name of the Vulnerable Software and Affected Versions: Canto Cumulus versions through 11.1.3 Description: A Server-Side Request Forgery issue allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the...

SQL Injection Vulnerability in Cumulus Reports

Cumulus Reports is a free enterprise-grade WEB reporting tool. Cumulus Reports suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

The vulnerability of the Switch Configuration Tools Backend component (clcmd_server) of the Cumulus Linux operating system allows a hacker to execute arbitrary commands.

The vulnerability of the Switch Configuration Tools Backend component clcmdserver in the Cumulus Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary commands using metashell shells, utilizing the “cl-rctl”...

Cumulus Linux Switch Configuration Tools Backend (clcmd_server) Security Vulnerability

Cumulus Linux is an open network operating system from Cumulus Networks, Inc. Switch Configuration Tools Backend clcmdserver is one of the backend gateway configuration tools. A security vulnerability exists in Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier...

Cumulus Linux FRRouting bgpd Information Disclosure Vulnerability

Cumulus Linux is an open network operating system from Cumulus Networks, Inc. FRRouting FRR is one of the suite of IP routing protocols for Linux and Unix platforms. bgpd is one of the border gateway protocols. A security vulnerability in bgpd in versions of FRR prior to 2.0.2 and 3.x prior to...