Korenix JetNet Man-in-the-Middle Attack Vulnerability

JetNet is a family of industrial Ethernet switch products from Clorox. A man-in-the-middle attack vulnerability exists in Korenix JetNet, where an attacker can access hard-coded certificates and private keys, leading to the execution of a man-in-the-middle attack...

Korenix JetNet

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Korenix Equipment: JetNet Vulnerabilities: Use of Hard-coded Cryptographic Key, Use of Hard-coded Credentials AFFECTED PRODUCTS The following versions of JetNet, an Ethernet switch, are affected: JetNet5018G version...

CVE-2014-9564

CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks and resulting web cache poisoning or cross-site scripting XSS attack...

NETGEAR ProSAFE Devices Detection (SNMP)

This script performs SNMP based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3881

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

Huawei Ethernet Switch Local Information Disclosure Vulnerability

Huawei Ethernet Switch is an Ethernet switch product from Huawei, China. A security vulnerability exists in Huawei Ethernet Switch, which can be exploited by an attacker to submit a special request to obtain sensitive information...

Security Advisory - Information Exposure Vulnerability in Huawei Ethernet Switch

There is an information exposure vulnerability in Huawei Ethernet switch. When uploading files to some directory, the user needs to enter the username and password. However, the system does not mask passwords. As a result, the password entered is displayed in plain text, leading to password leaks...

HTTP Response Splitting Vulnerability in Multiple IBM Flex System Products

IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches are both products of IBM USA. The former is an Ethernet adapter product; the latter is a switch product. A security vulnerability exists in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches due to the...

Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities

Document Title: =============== Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=443 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ===================================...

Siemens Scalance X Buffer Overflow Vulnerability

Overview ICS-CERT has received a report from Siemens regarding a buffer overflow vulnerability in the web interface of the Scalance X Industrial Ethernet switch. This vulnerability was reported to Siemens by Jürgen Bilberger from Daimler TSS GmbH. This vulnerability leaves the affected devices...

PT-2009-1058 · Moxa +4 · Moxa Pt-7728 +7

Name of the Vulnerable Software and Affected Versions: Moxa PT-508, PT-7728, PT-7828, MDS-G4012 affected versions not specified ntp versions prior to 4.2.4p8 ntp version 4.2.0.a.20040617 ntp version 4.1.2 Description: The issue is related to uncontrolled recursion in the Ethernet switch microcode...

CVE-2006-6717

The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations...

CVE-2006-6717

The CVE-2006-6717 entry affects the Allied Telesis AT-9000/24 Ethernet switch. The vulnerability arises because the device accepts management packets from arbitrary VLANs, contrary to documentation, enabling remote attackers to reach the switch from unexpected locations. The impact is described i...

CVE-2006-6717

The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations...

Allied Telesis AT-9000/24 ethernet switche unauthorized access

Administration interface may be accessed from any VLAN...

Asante FM2008 10/100 Ethernet switch backdoor login

The Asante FM2008 is an 8 port managed Ethernet 10/100 switch. It may be managed, like many others in its device class, by Telnet, by serial port, by HTTP, or by SNMP. Also like most similar devices, the serial port, HTTP, and Telnet access methods require one to provide username/password...