21 matches found
EUVD-2017-15668
Malware in sbrugna...
EUVD-2019-10476
Malware in sbrugna...
Cisco Small Business Router Privilege Escalation
The vulnerability of the microprogramming software for Cisco Small Business routers of the 250, 350, 350X, 550X series, as well as the Cisco FindIT Network Probe software for configuring and controlling wired and wireless networks, is related to the presence of a hard-coded pair of open/closed ke...
PT-2019-3517
Name of the Vulnerable Software and Affected Versions Cisco Small Business series 250, 350, 350X, 550X affected versions not specified Cisco FindIT Network Probe affected versions not specified Description The issue is related to a hardcoded X.509 certificate public/private key pair in the softwa...
Design/Logic Flaw
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
CVE-2019-1919 Cisco FindIT Network Management Software Static Credentials Vulnerability
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
PT-2019-2788
Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Management versions 1.1.4 Cisco FindIT Network Probe versions 1.1.4 Description The issue is related to the use of pre-installed credentials in virtual machine images. An attacker could exploit this to gain elevated...
CVE-2019-1919: Use of Hard-coded Credentials
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
CVE-2017-12314
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to the device availability, confidentiality, and integrity, aka Insecure Library Loading. The vulnerability is due to...
PT-2017-12486
Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Discovery Utility affected versions not specified Description A vulnerability could allow an authenticated, local attacker to perform a DLL preloading attack. The issue is due to the application loading a malicious copy of...
CVE-2017-12314: Uncontrolled Search Path Element
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to the device availability, confidentiality, and integrity, aka Insecure Library Loading. The vulnerability is due to...
Cisco FindIT Network Discovery Utility Code Execution Vulnerability
Cisco FindIT Network Discovery Utility is a network device manager from Cisco USA. The product provides management functions for Cisco network devices. A security vulnerability exists in the Cisco FindIT Network Discovery Utility. A local attacker can exploit this vulnerability by placing an...
CVE-2017-12252
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicio...
PT-2017-12428
Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Discovery Utility affected versions not specified Description A vulnerability could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability,...
CVE-2017-12252: Improper Input Validation
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially causing a partial impact to device availability, confidentiality, and integrity. The vulnerability is due to the application loading a malicio...
Design/Logic Flaw
A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...
CVE-2017-6614
A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...
CVE-2017-6614
A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...
CVE-2017-6614: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...
PT-2017-17185
Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Probe Software version 1.0.0 Description The issue is related to the file-download feature of the web user interface, where the absence of role-based access control RBAC for file-download requests allows an authenticated,...