PT-2021-7002

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME affected versions not specified Description The issue is related to the implementation of the Cisco Discovery...

CVE-2021-35977

An issue was discovered in Digi RealPort for Windows through 4.8.488.0. A buffer overflow exists in the handling of ADDP discovery response messages. This could result in arbitrary code execution...

CVE-2021-34776

CVE-2021-34776 refers to multiple vulnerabilities in the LLDP implementation of Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could execute code on the device or cause a reload, and LLDP database corruption could occur. The advisory attributes the issues to...

CVE-2021-34777

CVE-2021-34777 refers to multiple LLDP vulnerabilities in Cisco Small Business 220 Series Smart Switches. The issues allow an unauthenticated, adjacent attacker to execute code or cause a reload, and to corrupt the LLDP database. Core impact is execution/reload on the affected device and possible...

CVE-2021-34779

CVE-2021-34779 concerns Cisco Small Business 220 Series Smart Switches with LLDP vulnerabilities. An unauthenticated, adjacent attacker in the same Layer 2 broadcast domain could potentially execute code on the device or cause it to reload, and/or trigger LLDP database corruption. Impact is tied ...

CVE-2021-34775

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34778: Buffer Copy without Checking Size of Input

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

Cisco Small Business 220 Series Smart Switches缓冲区错误漏洞

The Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco USA. A buffer error vulnerability exists in the Cisco Small Business 220 Series Smart Switches, which can be exploited by an attacker to execute code on an affected device or cause the code to be...

Cisco Small Business 220 Series Smart Switches缓冲区错误漏洞

The Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco USA. A buffer error vulnerability exists in the Cisco Small Business 220 Series Smart Switches, which can be exploited by an attacker to execute code on an affected device or cause the code to be...

CVE-2021-34703

A vulnerability in the Link Layer Discovery Protocol LLDP message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to improper initialization of a...

CVE-2021-40866

Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the disabled by default /sqfs/bin/sccd daemon, which fails to check authentication when the authentication TLV is missing from a received NSDP packet. This affects GC108P before 1.0.8....

Patch now! Netgear fixes serious smart switch vulnerabilities

In a security advisory, NetGear has announced it has fixed three vulnerabilities in firmware updates for several network devices. Most of the affected products are smart switches, some of them with cloud management capabilities that allow for configuring and monitoring them over the web. One of t...

CVE-2021-34734

A vulnerability in the Link Layer Discovery Protocol LLDP implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. This vulnerability is due to improper management of memory...

Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free Denial of Service Vulnerability

A vulnerability in the Link Layer Discovery Protocol LLDP implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. This vulnerability is due to improper management of memory...

CVE-2021-34734: Double Free

A vulnerability in the Link Layer Discovery Protocol LLDP implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. This vulnerability is due to improper management of memory...

The vulnerability in the implementation of the SSDP protocol for the WiFi Simple Config server (wscd) in the Realtek SDK development tools allows a hacker to execute arbitrary code.

The vulnerability of the SSDP protocol implementation in the WiFi Simple Config wscd server developed with the Realtek SDK arises due to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the UPnP SUBSCRIBE/UNSUBSCRIBE message...

CVE-2021-35393

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or miniupnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due ...

CVE-2021-35392

Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or miniupnpd and is the successor to miniigd. The server is vulnerable to a heap buffer overflow that is present due to unsafe...

Realtek Jungle SDK 缓冲区错误漏洞

The Realtek Jungle SDK provides an HTTP web server that exposes a management interface that can be used to configure access points. A security vulnerability exists in the Realtek Jungle SDK, which stems from the fact that Realtek Jungle SDK versions v2.x through v3.4.14B provide a "WiFi Simple...

Vulnerabilities fixed in Cisco RV-series routers

Cisco has fixed vulnerabilities in several routers in its RV product line. An unauthenticated malicious party could potentially exploit the vulnerabilities potentially exploit them to cause a denial-of-service cause or to execute arbitrary code with elevated privileges. execution. To do this, rog...