CVE-2022-32536

Technical details about CVE-2022-32536 are not publicly provided in the supplied documents. No specifics on affected components, root cause, or fixes are available here. Monitor for future updates from vendors and security advisories.

CVE-2022-32535 Web server runs as root

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch...

CVE-2022-32535

The CVE describes a privilege-escalation issue in Bosch’s PRA-ES8P2S Ethernet switch running web server on firmware 1.01.05, where the web server operates with root privileges. In combination with CVE-2022-23534, this could allow an attacker to gain root access to the device. Documents confirm af...

CVE-2022-22560

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...

CVE-2022-22560

Dell EMC PowerScale OneFS 8.1.x–9.1.x is affected by a vulnerability due to hard coded credentials that allow a locally authenticated attacker to log in as the admin user to the backend Ethernet switch of a PowerScale cluster, potentially taking the switch offline. Root cause: hard coded credenti...

Phoenix Contact FL SWITCH 安全漏洞

The Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact FL SWITCH Series that originates from allowing a user with low privileges to enable full access to the device configuration...

Weak password vulnerability in NNETGEAR GS748Tv5

The NETGEAR GS748Tv5 is a Gigabit Ethernet switch. The NNETGEAR GS748Tv5 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

NETGEAR GS716Tv3 and GS724Tv4 Cross-Site Request Forgery Vulnerabilities

The NETGEAR GS716Tv3 is a 16-port Gigabit Ethernet Smart Managed Professional Switch with 2 SFP ports.The NETGEAR GS724Tv4 is a 24-port Gigabit Smart Managed Professional Switch with 2 SFP ports. A cross-site request forgery vulnerability exists in the NETGEAR GS716Tv3 and GS724Tv4. No detailed...

CVE-2020-16246

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site...

CVE-2020-16246

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site...

Cross site scripting

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site...

CVE-2020-16246

The CVE-2020-16246 entry pertains to GE Reason S20 Ethernet Switches (S2020, S2024) affected by cross-site scripting due to improper neutralization of input during web page generation (CWE-79). Root cause: unvalidated/unsanitized input in the web interface enables crafted requests to render malic...

CVE-2020-16242

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts...

Cross site scripting

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts...

CVE-2020-16242

CVE-2020-16242 applies to GE Reason S20 Ethernet Switch. Affected products: S2020 and S2024 firmware versions prior to 07A06. Vulnerability: cross-site scripting (XSS) due to improper neutralization of input during web page generation (CWE-79) in the device’s WEB interface, potentially enabling a...

CVE-2020-16242 GE Reason S20 Ethernet Switch

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts...

GE Reason S20 Ethernet Switch

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: General Electric Equipment: Reason S20 Ethernet Switch Vulnerabilities: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow unauthorized accounts...

Red Lion N-Tron 702-W/702M12-W Cross-Site Scripting Vulnerability

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. A cross-site scripting vulnerability exists in the Red Lion N-Tron 702-W/702M12-W, which can be exploited by a remote attacker to execute arbitrary code and perform actions in the context of the attacked user...

Red Lion N-Tron 702-W/702M12-W Cross-Site Scripting Vulnerability (CNVD-2020-49664)

The Red Lion N-Tron 702-W/702M12-W is a high voltage Ethernet switch product. A cross-site scripting vulnerability exists in the Red Lion N-Tron 702-W/702M12-W, which can be exploited by an attacker to execute arbitrary code to access sensitive data...

NETGEAR GS810EMX Information Disclosure Vulnerability

The NETGEAR GS810EMX is an Ethernet switch from NETGEAR. A security vulnerability exists in the NETGEAR GS810EMX prior to version 1.0.0.5. An attacker could exploit the vulnerability to obtain sensitive information...