Lucene search
+L

160 matches found

ATTACKERKB
ATTACKERKB
added 2021/11/10 12:15 p.m.5 views

CVE-2021-39474

Vulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected version 1319010201r009. The vulnerability allows an attacker with privileges and network access through the ping.cmd component to execute commands on the device...

9CVSS7.2AI score0.01946EPSS
Exploits1References3
CVE
CVE
added 2021/11/10 11:30 a.m.57 views

CVE-2021-39474

CVE-2021-39474 affects the Docsis 3.0 UBC1319BA00 Router (affected version 1319010201r009). A privileged attacker with network access can use the ping.cmd component to execute commands on the device. Exploitation details, impact scope, and remediation are not consistently documented across source...

9CVSS7AI score0.01946EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/11/10 11:30 a.m.31 views

CVE-2021-39474

Vulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected version 1319010201r009. The vulnerability allows an attacker with privileges and network access through the ping.cmd component to execute commands on the device...

7.3AI score0.01946EPSS
Exploits1References2
NVD
NVD
added 2020/11/27 4:15 p.m.15 views

CVE-2020-29138

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running...

5.3CVSS5.4AI score0.01116EPSS
Exploits0References1
Prion
Prion
added 2020/11/27 4:15 p.m.14 views

Design/Logic Flaw

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running...

5CVSS5.4AI score0.01116EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/11/27 3:7 p.m.73 views

CVE-2020-29138

Technical details such as affected firmware versions, root-cause specifics, and exploitation information are not publicly provided in the supplied documents. Monitor for updates from vendors and official advisories.

5.3CVSS5.4AI score0.01116EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.53 views

F5 Networks BIG-IP : Multiple Wireshark vulnerabilities (K34035645)

CVE-2018-7320 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by validating operand offsets. CVE-2018-7321 In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a lar...

7.5CVSS7.3AI score0.02743EPSS
Exploits3References24
OpenVAS
OpenVAS
added 2018/02/26 12:0 a.m.44 views

Wireshark Security Updates (wnpa-sec-2018-05 to wnpa-sec-2018-14) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

7.5CVSS8.6AI score0.02743EPSS
Exploits3References10
NVD
NVD
added 2018/02/23 10:29 p.m.21 views

CVE-2018-7337

In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs...

7.5CVSS7.5AI score0.02667EPSS
Exploits0References5
OSV
OSV
added 2018/02/23 10:29 p.m.3 views

DEBIAN-CVE-2018-7337

In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs...

7.5CVSS7.4AI score0.02667EPSS
Exploits0References1
OSV
OSV
added 2018/02/23 10:29 p.m.20 views

CVE-2018-7337

In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs...

7.5CVSS6.9AI score
Exploits0References5
Prion
Prion
added 2018/02/23 10:29 p.m.21 views

Code injection

In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs...

5CVSS7.3AI score0.02667EPSS
Exploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2018/02/23 10:29 p.m.28 views

CVE-2018-7337

In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs...

7.5CVSS6.8AI score0.02667EPSS
Exploits0References4
OSV
OSV
added 2018/02/23 10:29 p.m.5 views

UBUNTU-CVE-2018-7337

In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs...

7.5CVSS6.7AI score0.02667EPSS
Exploits0References5
Cvelist
Cvelist
added 2018/02/23 10:0 p.m.25 views

CVE-2018-7337

In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs...

7.4AI score0.02667EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2018/02/23 10:0 p.m.36 views

CVE-2018-7337

In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs...

7.5CVSS3AI score0.02667EPSS
Exploits0
CVE
CVE
added 2018/02/23 10:0 p.m.125 views

CVE-2018-7337

CVE-2018-7337 affects Wireshark 2.4.0–2.4.4, where the DOCSIS protocol dissector could crash. The root cause was a recursive algorithm used for concatenated PDUs in plugins/docsis/packet-docsis.c. The issue was addressed by removing that recursive approach, mitigating the crash vector. Connected ...

7.5CVSS7.3AI score0.02667EPSS
Exploits0References5Affected Software1
AlpineLinux
AlpineLinux
added 2018/02/23 10:0 p.m.59 views

CVE-2018-7337

In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs...

7.5CVSS7.5AI score0.02667EPSS
Exploits0
Kaspersky
Kaspersky
added 2018/02/23 12:0 a.m.115 views

KLA11201 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An improper operand validation offsets in the SIGCOMP protocol dissector can be exploited remotely via...

7.5CVSS8.5AI score0.02743EPSS
Exploits2References12
FreeBSD
FreeBSD
added 2018/02/23 12:0 a.m.44 views

wireshark -- multiple security issues

wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. CVE-2018-7335 wnpa-sec-2018-06. Large or infinite loops in multiple dissectors. CVE-2018-7321 through CVE-2018-7333 wnpa-sec-2018-07. UMTS MAC dissector crash. CVE-2018-7334 wnpa-sec-2018-08. DOCSIS dissector crash...

7.5CVSS8AI score0.02743EPSS
Exploits2References11
Rows per page
Query Builder