93 matches found
Cross site scripting
Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller V5.0.0.7 and prior which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4...
CVE-2020-7524
Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller V5.0.0.7 and prior which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4...
CVE-2020-7524: Out-of-bounds Write
Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller V5.0.0.7 and prior which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4...
PT-2020-3666
Name of the Vulnerable Software and Affected Versions Modicon M218 Logic Controller versions V5.0.0.7 and prior Description The issue is related to an out-of-bounds write that could cause a Denial of Service when a specific crafted IPv4 packet is sent to the controller. This can cause IPv4 device...
Race condition
The FPC Flexible PIC Concentrator of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restar...
CVE-2020-1638: Use of sizeof() on a Pointer Type
The FPC Flexible PIC Concentrator of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restar...
PT-2020-4141
Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.2R1-S4, 19.2R2, 19.3R2-S2, 19.3R3, 19.4R1-S1, 19.4R2 Junos OS Evolved versions prior to 19.4R2-EVO Description: The issue exists due to insufficient input validation in the FPC module of Junos OS and Junos OS...
Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2018-1123)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2019-1443)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code injection
When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv4 packets who may remotely take over the code execution of the JDHDCP process. This iss...
CVE-2019-0066 Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core
An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...
PT-2019-3491
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1F6-S12 Juniper Networks Junos OS versions prior to 15.1R7-S2 Juniper Networks Junos OS versions prior to 15.1X49-D150 on SRX Series Juniper Networks Junos OS versions prior to 15.1X53-D68 Juniper...
CVE-2019-0066: Unexpected Status Code or Return Value
An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...
PT-2019-1716
Name of the Vulnerable Software and Affected Versions Cisco IOS Software affected versions not specified Description A vulnerability in the Network Address Translation 64 NAT64 functions could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload. T...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2018-11492
ASUS HG100 devices allow denial of service via an IPv4 packet flood...
PT-2018-10609
Name of the Vulnerable Software and Affected Versions ASUS HG100 affected versions not specified Description The issue allows for denial of service via an IPv4 packet flood. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2018-11492: Undefined Security Weakness
ASUS HG100 devices allow denial of service via an IPv4 packet flood...
EulerOS 2.0 SP3 : dhcp (EulerOS-SA-2018-1162)
According to the version of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service application crash via an...
EulerOS 2.0 SP2 : dhcp (EulerOS-SA-2018-1123)
According to the versions of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A...