Remote Access no longer needs to be Complex and Cumbersome

From an IT management perspective, remote access management can be complex. Deployment, administration, testing and compliance is often multifaceted and time consuming, and security is an on-going concern. Granted, I have talked with IT professionals who tell me VPNs - being the primary remote...

Schneider Electric StruxureWare Data Center Expert Product Password Disclosure Vulnerability

StruxureWare Data Center Expert is a DCIM Data Center Infrastructure Management solution designed to monitor and control infrastructure, including security, power and environment. A password disclosure vulnerability exists in the Schneider Electric StruxureWare Data Center Expert product. The...

Symantec Decomposer Engine Security Update

SUMMARY Symantec has released an update to address two issues in the RAR file parser component of the antivirus decomposer engine used by multiple Symantec products. Parsing of maliciously formatted RAR container files may cause an application-level denial of service condition. AFFECTED PRODUCTS...

Denial of Service Vulnerability in Multiple Intel Solid-State Drive DC Series Products

The Intel Solid-State Drive DC series is available in some Lenovo System X servers. A denial of service vulnerability exists in multiple Intel Solid-State Drive DC Series products. An attacker could exploit the vulnerability to cause a denial of service condition...

Joyent Smart Data Center 'Docker API' Local Elevation of Privilege Vulnerability

Joyent Smart Data Center SDC is an open source cloud management platform from Joyent, Inc. A local elevation of privilege vulnerability exists in the Joyent Smart Data Center 'Docker API'. A local attacker could exploit this vulnerability to execute arbitrary code with elevated privileges...

Joyent Smart Data Center Docker API Zone Escape Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within a Docker...

Cisco Data Center Operations Management Solution in the presence of a serious vulnerability-a vulnerability warning-the black bar safety net

! Cisco is a leading global network solutions provider, the company is committed to numerous companies to build network unimpeded,“Bridge”, and with his own keen insight, rich industry experience, advanced technology, help enterprises to put the network into a strategic asset, to fully tap the...

Potential vulnerability in Intel® SSD Data Center Family for SATA - lu

Lenovo Security Advisory: LEN-6022 Potential Impact: Denial of service Severity:High Scope of Impact: Industry-Wide Summary Description: Intel Solid State Drives SSDs are used in some Lenovo System X servers. The Intel SSD Data Center Family for SATA product series was designed to the ATA-ACS...

Potential vulnerability in Intel® SSD Data Center Family for SATA - Lenovo Support NL

No description provided...

CVE-2016-3645

Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Ma...

Buffer overflow

Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac;...

Memory corruption

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

Memory Corruption Vulnerability in Multiple Symantec and Norton Products (CNVD-2016-04437)

Symantec Advanced Threat Protection ATP, Symantec Embedded Security:Critical System Protection SES:CSP and Symantec Data Center Security: Server Advanced SDCS:SA are security products from Symantec Corporation. Advanced SDCS:SA are security products from Symantec, Inc. ATP is a suite of software...

Symantec Decomposer Engine Multiple Parsing Vulnerabilities

SUMMARY Symantec is aware of buffer overflow and memory corruption findings in the AntiVirus Decomposer engine used in various configurations by multiple Symantec products. FAQ on Impact to Symantec Products: AFFECTED PRODUCTS Affected Enterprise Products Product | Version | Solutions ---|---|---...

Papouch Backdoor Account / CSRF / Missing Authentication

+++++ Vulnerable Products 1. Papouch TME Ethernet thermometer 2. Papouch TME multi: Temperature and humidity via Ethernet All versions affected TME - Ethernet Thermometer http://www.papouch.com/en/shop/product/tme-ip-ethernet-thermometer/ TME multi: Temperature and humidity via Ethernet...

PT-2016-39: Information Disclosure in StruxureWare Data Center Expert

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in StruxureWare Data Center Expert. Vulnerability in StruxureWare Data Center Expert allows attackers to obtain product passwords in cleartext by reading random access memory RAM. How to fix Upda...

Design/Logic Flaw

Symantec Embedded Security: Critical System Protection SES:CSP 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices SES:CSP 6.5.0 before MP1, Critical System Protection SCSP before 5.2.9 MP6, Data Center Security: Server Advanced Server DCS:SA 6.x before...

CVE-2015-8799

CVE-2015-8799 is a directory-traversal vulnerability in the Management Server of Symantec SES:CSP/SCSP/DCS:SA products. It allows remote authenticated users to write update-package data to arbitrary agent locations via unspecified vectors, potentially enabling code execution on affected agents. A...

CVE-2015-8800

Symantec Embedded Security: Critical System Protection SES:CSP 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices SES:CSP 6.5.0 before MP1, Critical System Protection SCSP before 5.2.9 MP6, Data Center Security: Server Advanced Server DCS:SA 6.x before...

CVE-2015-8157

CVE-2015-8157 is a SQL injection in the Management Server of Symantec SES:CSP and related products. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Affected products/versions include SES:CSP 1.0.x before 1.0 MP5, SES:CSP for Controllers and D...