Cisco IOS Software Zone-Based Firewall Feature Bypass Vulnerability (cisco-sa-20161207-ios-zbf)

A vulnerability in the Zone-Based Firewall feature of Cisco IOS Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...

Cisco IOS and Cisco IOS XE Software Zone-Based Firewall Feature Bypass Vulnerability

A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. The vulnerability is due to a logic flaw in a corner case scenario. An...

Peplink VPN-Firewall Open Redirect Vulnerability

Peplink VPN-Firewall is a vpn firewall product from Peplink. Open redirection vulnerability exists in several versions of Peplink VPN-Firewall, which can be exploited by remote attackers to redirect users to arbitrary websites and execute phishing attacks...

Apple OS X Server Information Disclosure And Security Bypass Vulnerabilities

Apple OS X Server is prone to information disclosure and security bypass vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-9796

Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...

Authentication flaw

Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...

CVE-2016-9796

The CVE-2016-9796 issue affects Alcatel-Lucent OmniVista 8770 (versions 2.0–3.0). The root cause is an authentication bypass that allows an attacker to query GIOP interfaces over TCP port 30024 and invoke methods (AddJobSet, AddJob, ExecuteNow) to run arbitrary commands with NT AUTHORITY\SYSTEM p...

CVE-2016-9796

Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...

Router high-risk vulnerabilities induced the German telecommunications ultra 90 million users suffered network disruption-vulnerability warning-the black bar safety net

! Event overview Last weekend millions of German Internet users suffered a series of network outages, investigate its reason is a failure of the home routers hijacked. Deutsche Telekom's 2000 million users with 90 million users received the interrupt effect from the last Sunday continues to prese...

Peplink NGxxx/LCxxx VPN-Firewall Open Redirect

Peplink NGxxx/LCxxx VPN-Firewall Open Redirect Vulnerability Vendor: Qingdao Xunbo Information Technology Co., Ltd. Product web page: http://www.peplink.net Affected version: PEPLINK NG300 VPN-Firewall PEPLINK NG320-VPN-Firewall PEPLINK NG500-VPN-Firewall PEPLINK NG520-VPN-Firewall PEPLINK...

Peplink NGxxx/LCxxx VPN-Firewall Open Redirect Vulnerability

Summary The NG500 / 520 is a high-performance VPN server, which is suitable for small and medium enterprises to use as a VPN center. It is simple to deploy and high security. At the same time, NG500 / 520 products also integrates advanced firewall features to support access to computers by group,...

CentOS 7 : firewalld (CESA-2016:2597)

An update for firewalld is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Security Advisory - Buffer Overflow Vulnerability in Huawei Firewall Products

The security policy processing module of some Huawei firewall products have a buffer overflow vulnerability. An authenticated attacker may setup a specific security policy into the devices, causing buffer overflow and crash the system. Vulnerability ID: HWPSIRT-2016-06074 This vulnerability has...

CVE-2016-7429

A flaw was found in the way ntpd running on a host with multiple network interfaces handled certain server responses. A remote attacker could use this flaw which would cause ntpd to not synchronize with the source. Mitigation If you are going to configure your OS to disable source address checks,...

B+B SmartWorx VESP211 Authentication Bypass Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified an authentication bypass vulnerability in B+B SmartWorx’s VESP211 serial servers. B+B SmartWorx has produced an implementation plan to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The...

CVE-2016-6460

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. Cisco Firepower System...

Denial of Service Vulnerability in Multiple Huawei Firewall Devices

The Huawei USG9580, 9560 and 9520 are all USG9500 series firewall appliances from Huawei, China. A denial of service vulnerability exists in multiple Huawei firewall devices. Due to insufficient checksums on certain fields of DHCP messages, an unauthenticated attacker can send special DHCP reques...

OpenSSH Vulnerability

Palo Alto Networks makes use of a the OpenSSH tool. CVE-2016-6210 was recently confirmed to be applicable to the version in use by PAN-OS. Ref 100977/CVE-2016-6210. To exploit this vulnerability, an attacker would have to guess usernames defined as system administrators on the firewall. This issu...

OpenSSH Vulnerability

Palo Alto Networks makes use of a the OpenSSH tool. CVE-2016-6210 was recently confirmed to be applicable to the version in use by PAN-OS. Ref 100977/CVE-2016-6210. To exploit this vulnerability, an attacker would have to guess usernames defined as system administrators on the firewall. This issu...

Multiple F5 BIG-IP Product Denial of Service Vulnerabilities

F5 BIG-IP ASM Application Security Manager is a network security product from F5 Corporation, U.S.A. ASM is a comprehensive web application firewall that protects applications and data from known and unknown threats, defends against Trojans that bypass standard protections, and patches...