Design/Logic Flaw

Vulnerability in the Oracle Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: System Management. The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10265

Vulnerability in the Oracle Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: System Management. The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10260

CVE-2017-10260 affects Oracle Integrated Lights Out Manager (ILOM) in Oracle Sun Systems Products Suite (subcomponent: System Management) prior to version 3.2.6. An unauthenticated attacker with network access via HTTP can cause a hang or frequent crashes (complete DOS). CVSS 3.0 base score 7.5 (...

CVE-2017-10260: Undefined Security Weakness

Vulnerability in the Oracle Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: System Management. The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2017-11252

Name of the Vulnerable Software and Affected Versions Oracle Integrated Lights Out Manager ILOM versions prior to 3.2.6 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager ILOM, resulting in the ability to cause ...

PT-2017-11186

Name of the Vulnerable Software and Affected Versions Oracle Integrated Lights Out Manager ILOM versions prior to 3.2.6 Description The issue allows a high-privileged attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager ILOM, resulting in unauthorized read acce...

PT-2017-11256

Name of the Vulnerable Software and Affected Versions Oracle Integrated Lights Out Manager ILOM versions prior to 3.2.6 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Integrated Lights Out Manager ILOM. Successful attacks can result in...

CVE-2017-10194: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: System Management. The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2017-10265: Undefined Security Weakness

Vulnerability in the Oracle Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: System Management. The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-5791

The doFilter method in UrlAccessController in HPE Intelligent Management Center iMC PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI...

The vulnerability of the microprogramming software of Siemens SIMATIC STEP 7 (TIA Portal) arises from the incorrect file management format used for TIA project files during version updates. This allows attackers to access important information regarding configuration settings.

The vulnerability of the microprogramming software used in Siemens SIMATIC STEP 7 TIA Portal is related to the use of an incorrect file management format for TIA project files during version updates. Exploiting this vulnerability can allow a local attacker to access important configuration...

The vulnerability of the server management mechanism HP iLO 2, HP iLO 4, and HP iLO CM lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the server management mechanisms HP iLO 2, HP iLO 4, and HP iLO CM is due to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2017-12232

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 ISR G2 Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...

Cisco Integrated Services Routers Generation 2 Denial of Service Vulnerability

Cisco Integrated Services Routers Generation 2 ISR G2 Routers is a router device from Cisco.IOS is one of the operating systems used for network devices. A denial of service vulnerability exists in the protocol implementation of IOS versions 15.0 through 15.6 in Cisco Integrated Services Routers...

CVE-2017-12232: Undefined Security Weakness

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 ISR G2 Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...

Cisco IOS Software for Cisco Integrated Services Routers Generation 2 Denial of Service Vulnerability

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 ISR G2 Routers running Cisco IOS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilit...

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...

PT-2017-4196 · Cisco · Cisco Integrated Services Routers Generation 2 (Isr G2) Routers +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 15.0 through 15.6 Description: A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 ISR G2 Routers could allow an unauthenticated, adjacent attacker to cause an affected devi...

Design/Logic Flaw

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

CVE-2017-12223

Cisco IR800 Integrated Services Router Software ROMMON has an input validation vulnerability in ROMMON code that could let an unauthenticated, local attacker boot an unsigned Hypervisor via console access, modify ROMMON variables, and execute arbitrary code to install malicious Hypervisor firmwar...