Design/Logic Flaw

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A crash and reboot can be triggered by crafted IP traffic, as demonstrated by the Nikto vulnerability scanner. For example, sending the 111111 string to UDP port 20188 causes a reboot. To deny service for...

CVE-2019-20463

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A crash and reboot can be triggered by crafted IP traffic, as demonstrated by the Nikto vulnerability scanner. For example, sending the 111111 string to UDP port 20188 causes a reboot. To deny service for...

CVE-2021-23007

On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel TMM process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic. Note: Software versions which have reached End of Software Development EoSD are not evaluated...

CVE-2021-23007

On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel TMM process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic. Note: Software versions which have reached End of Software Development EoSD are not evaluated...

CVE-2021-23007

CVE-2021-23007 affects BIG-IP’s Traffic Management Microkernel (TMM) on versions 14.1.4 and 16.0.1.1. When the TMM process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic, potentially impacting connectivity. End-of-software-development (EoSD) versions are not ...

Critical Cisco SD-WAN Bugs Allow RCE Attacks

Cisco is warning of multiple, critical vulnerabilities in its software-defined networking for wide-area networks SD-WAN solutions for business users. Cisco issued patches addressing eight buffer-overflow and command-injection SD-WAN vulnerabilities. The most serious of these flaws could be...

多款 Cisco SD-WAN 产品缓冲区错误漏洞

The Cisco SD-WAN vEdge is a router from Cisco, Inc. that provides basic WAN and security and multi-cloud capabilities for Cisco SD-WAN solutions. This device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions.Cisco SD-WAN vManage is software from Cisco that...

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted fragmented IP...

The vulnerability of the IP traffic processing function in Cisco IOS XE routers with integrated Cisco services series 4461 allows a attacker to cause a service failure.

The vulnerability of the IP traffic processing function in Cisco IOS XE routers with integrated Cisco services from the 4461 series is related to errors in traffic processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Treck IP stacks contain multiple vulnerabilities

Overview Treck IP stack implementations for embedded systems are affected by multiple vulnerabilities. This set of vulnerabilities was researched and reported by JSOF, who calls them Ripple20. Description Treck IP network stack software is designed for and used in a variety of embedded systems. T...

CVE-2020-5878

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel TMM may restart on BIG-IP Virtual Edition VE while processing unusual IP traffic...

CVE-2020-5878

CVE-2020-5878 affects BIG-IP VE with the Traffic Management Microkernel (TMM). Affected versions: 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3. The issue can cause TMM to restart while processing unusual IP traffic, potentially temporarily degrading traffic processing and causing HA fail...

CVE-2020-5878

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel TMM may restart on BIG-IP Virtual Edition VE while processing unusual IP traffic...

Cisco IOS XE ISDN Data Leakage Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. A data leakage vulnerability exists in the Dialer interface feature for ISDN connections in Cisco IOS XE for Cisco 4000 Series Integrated Services Routers. The vulnerability stems from insufficient validation o...

CVE-2019-6625

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI also known as the BIG-IP Configuration utility...

Do DDoS attacks originate from Cloud Service Providers?

In a word, yes. Cloud service providers CSPs continue to power a growing portion of the greater Internet. According to Cisco, by 2021, 73 percent of cloud workloads are going to be CSP based, which reflects a compound annual growth rate of 27.5 percent from 2016 to 2021. Unfortunately, CSPs are...

Denial Of Service (DoS)

OpenStack Neutron is vulnerable to denial of service DoS attacks. This allows remote attacker to send DHCP discovery message or crafted non-IP traffic, bypassing intended MAC- spoofing protection mechanism. which leads to intercept network traffic and application crash...

Cisco Security Appliance Zero-Day Found Actively Exploited in the Wild

Attackers are actively exploiting a zero-day vulnerability in certain Cisco security products, to cause a denial-of-service DoS condition. The as-yet-unpatched flaw CVE-2018-15454 has an 8.6 CVSS score and is rated high-severity. It exists in the Session Initiation Protocol SIP inspection engine ...

Multiple F5 products have design flaws

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a set of solutions that provide secure and unified access to business-critical applications and networks. A security vulnerability exists in several F5 products. An attacker could exploit the vulnerability to cause...

Multi Manage Network Route via Meterpreter Session

This module manages session routing via an existing Meterpreter session. It enables other modules to 'pivot' through a compromised host when connecting to the named NETWORK and SUBMASK. Autoadd will search a session for valid subnets from the routing table and interface list then add routes to...