CVE-2020-9199

B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2020-9199

CVE-2020-9199 affects Huawei B2368-22, B2368-57, and B2368-66 devices (V100R001C00) and is due to insufficient input validation that allows command injection when an attacker with high privileges performs LAN-based operations. The vulnerability enables injection of commands to the target device, ...

dovecot: Out of bound reads in dovecot NTLM implementation

A flaw was found in dovecot. An out-of-bounds read flaw was found in the way dovecot handled NTLM authentication allowing an attacker to crash the dovecot auth process repeatedly preventing login. The highest threat from this vulnerability is to system availability...

Security Advisory - Command Injection Vulnerability in Some Huawei Products

Some Huawei products have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target...

CVE-2019-11852

An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN...

CVE-2019-11855

An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9...

CVE-2019-11852

An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN...

Cross site scripting

An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN...

Default credentials

An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9...

CVE-2019-11855 ALEOS LAN-Side RPC Server

An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9...

CVE-2019-11855

CVE-2019-11855 affects ALEOS gateway LAN: an RPC server is enabled by default in versions prior to 4.12.0, 4.9.5, and 4.4.9. The issue is exploitable over the network with no authentication (CVSSv3: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), implying high impact to confidentiality, integrity, and avai...

CVE-2019-11852 ALEOS ACEView Service Out-Of-Bounds Read

An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive information may be disclosed via the ACEviewservice, accessible by default on the LAN...

CVE-2019-11852

The connected CVE details show ALEOS ACEView Service in ALEOS is affected by an out-of-bounds read that can disclose sensitive information. Affected versions are prior to 4.13.0, 4.9.5, and 4.4.9, with the ACEView service accessible by default on the LAN. The root cause is an out-of-bounds read i...

CVE-2019-6258

D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol message, which is mishandled in /usr/sbin/udhcpd during reading of the /var/servd/LAN-1-udhcpd.conf file...

DEBIAN-CVE-2020-12673

In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read...

CVE-2019-20030

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected...

CVE-2019-20030

The CVE-2019-20030 entry concerns a NEC UM8000 voicemail system where an attacker who knows the modem access number can use SSH tunneling or standard Linux tools to access the system’s LAN port. All versions are affected. Red Hat and NVD entries corroborate a local-access issue with potential imp...

CVE-2019-20030

An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standard Linux utilities to gain access to the system's LAN port. All versions are affected...

CVE-2020-13699

TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10: --play URL. An attacker could force a victim to send an NTLM authentication request and either...

Cisco Wireless LAN Controller CAPWAP DoS (cisco-sa-wlc-capwap-dos-Y2sD9uEw)

According to its self-reported version, the Control and Provisioning of Wireless Access Points CAPWAP protocol handler of Cisco Wireless LAN Controller WLC is affected by a vulnerability due to insufficient validation of CAPWAP packets. An unauthenticated, remote attacker can exploit this, by...