Lucene search
+L

887 matches found

OSV
OSV
added 2019/06/20 3:15 a.m.10 views

CVE-2019-1878

A vulnerability in the Cisco Discovery Protocol CDP implementation for the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, adjacent attacker to inject arbitrary shell commands that are executed by the device. The vulnerability is due to...

8.8CVSS7.4AI score0.01078EPSS
SaveExploits0References2
Prion
Prion
added 2019/06/20 3:15 a.m.20 views

Input validation

A vulnerability in the Cisco Discovery Protocol CDP implementation for the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, adjacent attacker to inject arbitrary shell commands that are executed by the device. The vulnerability is due to...

8.3CVSS8.9AI score0.01078EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/06/20 3:5 a.m.25 views

CVE-2019-1878 Cisco TelePresence Endpoint Command Shell Injection Vulnerability

A vulnerability in the Cisco Discovery Protocol CDP implementation for the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, adjacent attacker to inject arbitrary shell commands that are executed by the device. The vulnerability is due to...

7.5CVSS9AI score0.01078EPSS
SaveExploits0References2
Cisco
Cisco
added 2019/06/19 4:0 p.m.131 views

Cisco TelePresence Endpoint Command Shell Injection Vulnerability

A vulnerability in the Cisco Discovery Protocol CDP implementation for the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, adjacent attacker to inject arbitrary shell commands that are executed by the device. The vulnerability is due to...

7.5CVSS2AI score0.01078EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:0 a.m.33 views

EulerOS Virtualization for ARM 64 3.0.1.0 : bluez (EulerOS-SA-2019-1378)

According to the version of the bluez package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An information-disclosure flaw was found in the bluetoothd implementation of the Service Discovery Protocol SDP. A speciall...

6.5CVSS6.5AI score0.07774EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.16 views

Siemens SCALANCE X-200, XR300-WG 3.0 and 3.1 RCDP Triggered Unauthorized Administrative Actions

Binary data 720205.prm...

8.8CVSS7.3AI score0.00999EPSS
SaveExploits0References2
Prion
Prion
added 2019/03/28 12:29 a.m.22 views

Race condition

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

6.1CVSS7.3AI score0.00713EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/03/28 12:29 a.m.5 views

CVE-2019-1750

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

7.4CVSS7.1AI score0.00713EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/03/28 12:0 a.m.7 views

Cisco IOS XE Catalyst 4500 Denial of Service Vulnerability

Cisco IOS XE is a modular operating system based on the Linux kernel. A denial of service vulnerability exists in the Simple Virtual Switching System VSS of the Cisco IOS XE software on Catalyst 4500 series switches, which stems from a failure to perform a complete processing error when handling...

7.4CVSS6.7AI score0.00713EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2019/03/27 11:55 p.m.14 views

CVE-2019-1750 Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

7.4CVSS6.9AI score0.00713EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/03/27 11:55 p.m.36 views

CVE-2019-1750 Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

7.4CVSS7.4AI score0.00713EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/06 12:0 a.m.8 views

The vulnerability of the implementations of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) in Cisco IP telephones allows a perpetrator to trigger a device reboot and a service failure.

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations in IP-telephone microprogramming systems arises from the lack of checks for the length of certain fields in protocol packets. Exploiting this vulnerability can allow an attacker to trigger a...

6.5CVSS6.6AI score0.0064EPSS
SaveExploits0References2
Hacker One
Hacker One
added 2019/02/26 4:59 p.m.21 views

Rootstock Labs: Traffic amplification attack via discovery protocol

A vulnerability was discovered in the RSKJ node's UDP discovery protocol that allowed for traffic amplification DDoS attacks. The ping-pong mechanism intended to protect against this was not properly implemented, allowing an attacker to successfully finish it even with a spoofed IP. By sending a...

7AI score
SaveExploits0
Prion
Prion
added 2019/02/21 8:29 p.m.16 views

Race condition

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...

6.1CVSS6.4AI score0.0064EPSS
SaveExploits0References2Affected Software14
CVE
CVE
added 2019/02/21 8:0 p.m.47 views

CVE-2019-1684

CVE-2019-1684 affects Cisco IP Phone 7800 and 8800 Series. The issue arises from missing length validation in the Cisco Discovery Protocol (CDP) / Link Layer Discovery Protocol (LLDP) header fields, allowing an unauthenticated, adjacent attacker to cause an affected phone to reload and experience...

6.5CVSS6.4AI score0.0064EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/02/21 8:0 p.m.20 views

CVE-2019-1684 Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...

6.5CVSS6.5AI score0.0064EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2019/02/21 8:0 p.m.9 views

CVE-2019-1684 Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...

6.5CVSS6.9AI score0.0064EPSS
SaveExploits0References2
Cisco
Cisco
added 2019/02/20 4:0 p.m.110 views

Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...

6.5CVSS1AI score0.0064EPSS
SaveExploits0References1
Prion
Prion
added 2019/02/12 10:29 p.m.24 views

Authentication flaw

Denial of Service attack in airMAX 8.3.2 , airMAX 6.0.7 and EdgeMAX 1.9.7 allow attackers to use the Discovery Protocol in amplification attacks...

5CVSS7.4AI score0.20974EPSS
SaveExploits0References3Affected Software2
NVD
NVD
added 2019/02/12 10:29 p.m.22 views

CVE-2017-0938

Denial of Service attack in airMAX 8.3.2 , airMAX 6.0.7 and EdgeMAX 1.9.7 allow attackers to use the Discovery Protocol in amplification attacks...

7.5CVSS7.4AI score0.20974EPSS
SaveExploits0References3
Rows per page
Query Builder