Security Bulletin: GNU C library (glibc) vulnerability affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware (CVE-2015-7547)

Summary A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware. Vulnerability Details Summary A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects IBM Fl...

Security Bulletin: Vulnerability in GNU C Library affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware (CVE-2015-5277)

Summary IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware has addressed the following vulnerability in GNU C Library. Vulnerability Details Summary IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware has addressed the following vulnerability i...

Security Bulletin: Vulnerability in SSLv3 affects IBM BNT Uplink Ethernet Switch Modules for IBM BladeCenter (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM BNT Uplink Ethernet Switch Modules for IBM BladeCenter. Vulnerability Details Summary SSLv3 contains a vulnerability that has been referred...

Security Bulletin: Vulnerabilities in Bash affect multiple products shipped with Intelligent Cluster (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Information about security vulnerabilities affecting multiple products shipped as components of Intelligent Cluster has been published in security bulletins. Vulnerability Details Abstract Information about security vulnerabilities affecting multiple products shipped as components of...

PT-2018-19343

Уязвимость компонента Virtual Distributed Ethernet Switch vde l3 связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

Cross site scripting

Cross-site scripting vulnerability in multiple FXC Inc. network devices Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Powe...

CVE-2018-0679

Cross-site scripting vulnerability in multiple FXC Inc. network devices Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Powe...

CVE-2018-0679

Cross-site scripting vulnerability in multiple FXC Inc. network devices Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Powe...

JVN#68528150: Multiple FXC network devices vulnerable to cross-site scripting

Multiple network devices provided by FXC Inc. contain a stored cross-site scripting vulnerability CWE-79. Impact If an attacker with administrative rights logs in the Management GUI and embeds a specially crafted script, then that script may be executed on another administrator's web browser...

ICSA-18-107-05_Rockwell Automation Stratix Industrial Managed Ethernet Switch

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit. Vendor : Rockwell Automation Equipment : Allen-Bradley Stratix Industrial Managed Ethernet Switch Vulnerabilities : Improper Input Validation, Resource Management Errors, 7PK – Errors, Improper...

Multiple Huawei Products IPv6 Protocol Over Boundary Read Vulnerability

Huawei Quidway S2700 and others are S-series switch products from Huawei, China. An out-of-bounds read vulnerability exists in the IPv6 protocol in several Huawei products, which stems from the program's lack of checksumming of messages. The vulnerability can be exploited to cause a device reboot...

Korenix JetNet Man-in-the-Middle Attack Vulnerability

JetNet is a family of industrial Ethernet switch products from Clorox. A man-in-the-middle attack vulnerability exists in Korenix JetNet, where an attacker can access hard-coded certificates and private keys, leading to the execution of a man-in-the-middle attack...

Korenix JetNet

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Korenix Equipment: JetNet Vulnerabilities: Use of Hard-coded Cryptographic Key, Use of Hard-coded Credentials AFFECTED PRODUCTS The following versions of JetNet, an Ethernet switch, are affected: JetNet5018G version...

PT-2017-3813

Name of the Vulnerable Software and Affected Versions Moxa PT-7528 affected versions not specified Moxa PT-7828 affected versions not specified Description The issue is related to the use of an unstable cryptographic algorithm in configuration files of the Ethernet switch microprogram. This could...

CVE-2014-9564

CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks and resulting web cache poisoning or cross-site scripting XSS attack...

NETGEAR ProSAFE Devices Detection (SNMP)

This script performs SNMP based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3881

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

Huawei Ethernet Switch Local Information Disclosure Vulnerability

Huawei Ethernet Switch is an Ethernet switch product from Huawei, China. A security vulnerability exists in Huawei Ethernet Switch, which can be exploited by an attacker to submit a special request to obtain sensitive information...

Security Advisory - Information Exposure Vulnerability in Huawei Ethernet Switch

There is an information exposure vulnerability in Huawei Ethernet switch. When uploading files to some directory, the user needs to enter the username and password. However, the system does not mask passwords. As a result, the password entered is displayed in plain text, leading to password leaks...

HTTP Response Splitting Vulnerability in Multiple IBM Flex System Products

IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches are both products of IBM USA. The former is an Ethernet adapter product; the latter is a switch product. A security vulnerability exists in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches due to the...