167 matches found
CVE-2022-43542
Aruba EdgeConnect Enterprise Software (ECOS) is affected by CVE-2022-43542 via its command line interface. The vulnerability allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially leading to full system compromise. Affected version...
CVE-2022-43518
An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files in Aruba EdgeConnect Enterprise...
CVE-2022-43518
An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files in Aruba EdgeConnect Enterprise...
CVE-2022-37926
CVE-2022-37926 affects Aruba EdgeConnect Enterprise Software via stored XSS in the web-based management interface. A remote attacker can upload a crafted file to trigger script execution in a victim’s browser within the affected interface. Affected versions are ECOS 9.2.1.0 and below; ECOS 9.1.3....
CVE-2022-37925
CVE-2022-37925 is an XSS vulnerability in Aruba EdgeConnect Enterprise web-based management interface. The issue affects Aruba EdgeConnect Enterprise software versions ECOS 9.2.1.0 and below, ECOS 9.1.3.0 and below, ECOS 9.0.7.0 and below, and ECOS 8.3.7.1 and below. The root cause is a reflected...
CVE-2022-37924
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...
CVE-2022-37922
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...
CVE-2022-37921
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...
CVE-2022-37921
Aruba EdgeConnect Enterprise Software is affected by CVE-2022-37921. The vulnerability stems from the Aruba EdgeConnect Enterprise command line interface, allowing remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially leading to full sys...
CVE-2022-37919
The CVE describes an unauthenticated denial-of-service in Aruba EdgeConnect Enterprise API accessible via the web-based management interface. Affected Software: Aruba EdgeConnect Enterprise (ECOS) 9.2.1.0 and below, 9.1.3.0 and below, 9.0.7.0 and below, and 8.3.7.1 and below. Root cause: API/QoS ...
Realtek eCos Stack Buffer Overflow (CVE-2022-27255)
A stack-based buffer overflow exists in Realtek eCos. Successful exploitation could lead to arbitrary code execution...
Exploit for Improper Input Validation in Realtek Ecos_Rsdk_Firmware
CVE-2022-27255-checker Simple checker for CVE-2022...
The vulnerability of the “SIP ALG” module (SIP Application Layer Gateway) in the Realtek SDK for the eCos operating system allows a hacker to execute arbitrary code.
The vulnerability of the “SIP ALG” module SIP Application Layer Gateway in the Realtek SDK for the eCos operating system is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted UDP packet...
CVE-2022-27255
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...
CVE-2022-27255
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...
Stack overflow
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...
CVE-2022-27255
CVE-2022-27255 affects Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1. The SIP ALG component that rewrites SDP data has a stack-based buffer overflow, enabling an attacker to remotely execute code without authentication by sending a crafted SIP packet containing malicious SDP data. The NVD metrics ra...
CVE-2022-27255
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...
PT-2022-4237 · Realtek · Realtek Ecos Rsdk +1
Name of the Vulnerable Software and Affected Versions: Realtek eCos RSDK version 1.5.7p1 Realtek MSDK version 4.9.4p1 Description: The SIP ALG function in Realtek eCos RSDK and MSDK has a stack-based buffer overflow that allows an attacker to remotely execute code without authentication via a...