Lucene search
+L

7316 matches found

NVD
NVD
added 2019/03/28 1:29 a.m.27 views

CVE-2019-1759

A vulnerability in access control list ACL functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic err...

5.3CVSS5.3AI score0.04395EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2019/03/28 12:25 a.m.36 views

CVE-2019-1759 Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

A vulnerability in access control list ACL functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic err...

5.3CVSS5.3AI score0.04395EPSS
SaveExploits2References2
CVE
CVE
added 2019/03/28 12:25 a.m.96 views

CVE-2019-1759

CVE-2019-1759 affects Cisco IOS XE Software’s Gigabit Ethernet Management Interface ACL bypass. The issue arises from a logic error introduced in 16.1.1 that causes ACLs applied to the management interface to fail, potentially allowing an unauthenticated, remote attacker to reach configured IPs o...

5.3CVSS5.2AI score0.04395EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2019/03/28 12:25 a.m.9 views

CVE-2019-1759 Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

A vulnerability in access control list ACL functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic err...

5.3CVSS7.2AI score0.04395EPSS
SaveExploits2References2
CNVD
CNVD
added 2019/03/28 12:00 a.m.10 views

Cisco IOS and IOS XE Access Control Error Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. An access control error vulnerability exists in the access control list feature of the Gigabit Ethernet management interface in Cisco IOS XE version 16.x, which can be exploited by...

5.3CVSS7.2AI score0.04395EPSS
SaveExploits2References1
OSV
OSV
added 2019/03/27 6:29 p.m.9 views

CVE-2018-19016

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB includes 1756-EWEBK Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected...

7.5CVSS5.8AI score0.0317EPSS
SaveExploits0References1
Prion
Prion
added 2019/03/27 6:29 p.m.15 views

Race condition

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB includes 1756-EWEBK Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected...

7.8CVSS7.4AI score0.0317EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 2019/03/27 6:29 p.m.12 views

CVE-2018-19016

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB includes 1756-EWEBK Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected...

7.8CVSS7.4AI score0.0317EPSS
SaveExploits0References1
CVE
CVE
added 2019/03/27 5:20 p.m.61 views

CVE-2018-19016

CVE-2018-19016 affects Rockwell Automation EtherNet/IP Web Server Modules: 1756-EWEB (incl. 1756-EWEBK) <= v5.001 and CompactLogix 1768-EWEB

7.8CVSS7.4AI score0.0317EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2019/03/27 5:20 p.m.29 views

CVE-2018-19016

Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB includes 1756-EWEBK Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected...

7.4AI score0.0317EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:00 a.m.8 views

The vulnerability of the implementation of the Fiber Channel over Ethernet protocol on Cisco NX-OS router operating systems allows a attacker to trigger a service failure.

The vulnerability of the Fiber Channel over Ethernet protocol implementation in Cisco NX-OS router operating systems is related to an error in assigning internal interface indices. Exploiting this vulnerability can allow attackers to cause service failures...

7.4CVSS6.9AI score0.00611EPSS
SaveExploits0References3
NVD
NVD
added 2019/03/21 4:00 p.m.25 views

CVE-2018-16563

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.35, Firmware variant MODBUS TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet module All versions, Firmware variant IEC104 for EN100 Ethernet module A...

5.9CVSS5.5AI score0.01314EPSS
SaveExploits0References1
OSV
OSV
added 2019/03/21 4:00 p.m.6 views

CVE-2018-16563

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.35, Firmware variant MODBUS TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet module All versions, Firmware variant IEC104 for EN100 Ethernet module A...

5.9CVSS5.7AI score0.01314EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:00 a.m.15 views

The vulnerability of microprogrammed software in Siemens Simatic S7-400 programmable logic controllers is related to errors in checking input data by Ethernet, PROFIBUS, and MPI interfaces. This allows a malicious actor to trigger a service failure.

The vulnerability of microprogrammed programmable logic controllers from Siemens Simatic S7-400 is related to errors in the validation of input data by Ethernet, PROFIBUS, and MPI interfaces. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system by sending a...

7.8CVSS7.2AI score0.01545EPSS
SaveExploits0References3Affected Software4
CVE
CVE
added 2019/03/11 10:00 p.m.90 views

CVE-2019-1617

Cisco NX-OS Software on Nexus 9000 Series Switches in Standalone NX-OS Mode is affected by CVE-2019-1617. The issue stems from incorrect processing of FCoE packets when the fcoe-npv feature is uninstalled, enabling an unauthenticated adjacent attacker to cause a denial of service by sending a str...

7.4CVSS7.2AI score0.0127EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2019/03/11 9:29 p.m.30 views

Race condition

A vulnerability in the Fibre Channel over Ethernet FCoE N-port Virtualization NPV protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to an incorrect processing of FCoE packets when...

6.1CVSS7.3AI score0.0127EPSS
SaveExploits1References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2019/03/10 12:00 a.m.28 views

Rockwell Automation RSLinx Classic Remote Code Execution (CVE-2019-6553)

A buffer overflow vulnerability exists in RSLinx Classic. This is due to a lack of input validation when handling EtherNet/IP packets. A successful exploitation of the vulnerability could to arbitrary code execution or denial of service conditions...

7.5CVSS9.5AI score0.50031EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2019/03/06 10:00 p.m.12 views

CVE-2019-1595 Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface...

7.4CVSS6.8AI score0.00611EPSS
SaveExploits0References2
CVE
CVE
added 2019/03/06 10:00 p.m.70 views

CVE-2019-1595

CVE-2019-1595 affects Cisco Nexus 5600/6000 NX-OS FCoE implementations. The issue is an incorrect allocation of an internal interface index, which an unauthenticated, adjacent attacker can exploit by sending crafted FCoE packets crossing affected interfaces. Successful exploitation can cause a pa...

7.4CVSS6.7AI score0.00611EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/03/06 10:00 p.m.27 views

CVE-2019-1595 Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface...

7.4CVSS7.3AI score0.00611EPSS
SaveExploits0References2
Rows per page
Query Builder