CVE-2022-2474

CVE-2022-2474 affects Haas Controller, version 100.20.000.1110, where the Ethernet Q Commands service lacks authentication. Any user on the same network segment (including remote connections) can access the service and write unauthorized macros to registers, enabling high-impact outcomes per ICS ...

CVE-2022-2474

Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allows any user on the same network segment as the controller even while connected remotely to access the service and write unauthorized macros to the device...

Sandman - NTP Based Backdoor For Red Team Engagements In Hardened Networks

Sandman is a backdoor that is meant to work on hardened networks during red team engagements. Sandman works as a stager and leverages NTP a protocol to sync time & date to get and run an arbitrary shellcode from a pre-defined server. Since NTP is a protocol that is overlooked by many defenders...

PT-2022-16842 · Haas · Haas Controller

Name of the Vulnerable Software and Affected Versions: Haas Controller version 100.20.000.1110 Description: The issue concerns the "Ethernet Q Commands" service in the Haas Controller, where authentication is currently unsupported. This allows any user on the same network segment as the controlle...

PT-2022-16853 · Haas · Haas Controller

Name of the Vulnerable Software and Affected Versions: Haas Controller version 100.20.000.1110 Description: The issue is related to insufficient granularity of access control when using the "Ethernet Q Commands" service. This allows any user to write macros into registers outside of the authorize...

The vulnerability of the Border Gateway Protocol (BGP) implementation in the Ethernet VPN (EVPN) technology of Juniper Networks’ Junos OS and Junos OS Evolved allows a attacker to cause service interruptions.

The vulnerability of the Border Gateway Protocol BGP implementation in the Ethernet VPN EVPN technology of Juniper Networks’ Junos OS and Junos OS Evolved is related to improper handling of unexpected types of data. Exploiting this vulnerability can allow a malicious actor to cause service...

PT-2022-25996 · Haas · Haas Controller

Name of the Vulnerable Software and Affected Versions: Haas Controller version 100.20.000.1110 Description: The issue concerns the transmission of communication traffic involving the "Ethernet Q Commands" service in cleartext. This allows an attacker to obtain sensitive information being passed t...

Citrix ADC and Citrix Gateway Buffer Overflow (CTX263807)

The remote Citrix ADC or Citrix Gateway device is version 11.1.x prior to 11.1-64.11, 12.1.x prior to 12.1-56.22, 13.0.x prior to 13.0-58.30. It may be, therefore, affected by a buffer overflow vulnerability in firmware for IntelR Ethernet 700 Series Controllers. This may allow an unauthenticated...

USN-5698-1: Open vSwitch vulnerability

It was discovered that Open vSwitch incorrectly handled comparison of certain minimasks. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code...

Linux kernel resource management error vulnerability (CNVD-2022-72085)

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that affects the function mtkppe checkskb in the component Ethernet handler file drivers/net/ethernet/mediatek/mtkppe.c. Operation leads to free post-use...

CVE-2022-3636

A vulnerability, which was classified as critical, was found in Linux Kernel. This affects the function mtkppecheckskb of the file drivers/net/ethernet/mediatek/mtkppe.c of the component Ethernet Handler. The manipulation leads to use after free. It is recommended to apply a patch to fix this...

CVE-2022-3636

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function mtkppecheckskb of the file drivers/net/ethernet/mediatek/mtkppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is...

CVE-2022-3636

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function mtkppecheckskb of the file drivers/net/ethernet/mediatek/mtkppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is...

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in Linux Kernel. This affects the function mtkppecheckskb of the file drivers/net/ethernet/mediatek/mtkppe.c of the component Ethernet Handler. The manipulation leads to use after free. It is recommended to apply a patch to fix this...

UBUNTU-CVE-2022-3636

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function mtkppecheckskb of the file drivers/net/ethernet/mediatek/mtkppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is...

CVE-2022-3636

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function mtkppecheckskb of the file drivers/net/ethernet/mediatek/mtkppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is...

CVE-2022-3636

CVE-2022-3636 is a Linux kernel vulnerability affecting the function __mtk_ppe_check_skb in drivers/net/ethernet/mediatek/mtk_ppe.c (Ethernet Handler). The issue is a use-after-free in the MTK PPE path, leading to potential corruption or crash. A patch is recommended to fix the issue. The vulnera...

Linux kernel 资源管理错误漏洞

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that affects the function mtkppe checkskb in the component Ethernet handler file drivers/net/ethernet/mediatek/mtkppe.c. Operation leads to free post-use...

CVE-2022-3636 Linux Kernel Ethernet mtk_ppe.c __mtk_ppe_check_skb use after free

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function mtkppecheckskb of the file drivers/net/ethernet/mediatek/mtkppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is...

CVE-2022-3636 Linux Kernel Ethernet mtk_ppe.c __mtk_ppe_check_skb use after free

A vulnerability was identified in Linux Kernel 33fc42de33278b2b3ec6f3390512987bc29a62b7. This affects the function mtkppecheckskb of the file drivers/net/ethernet/mediatek/mtkppe.c of the component Ethernet Handler. Such manipulation leads to use after free. The name of the patch is...