Lucene search
+L

1026 matches found

Cvelist
Cvelist
added 2022/09/27 6:40 p.m.35 views

CVE-2021-27862 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion and optionally VLAN0 headers...

5.1AI score0.00664EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2022/09/27 6:40 p.m.6 views

CVE-2021-27861 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers...

4.8AI score0.00616EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/09/27 6:40 p.m.68 views

CVE-2021-27861 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers...

5.2AI score0.00616EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/09/27 6:40 p.m.56 views

CVE-2021-27854 L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translation

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse...

5.1AI score0.00689EPSS
SaveExploits0References5
NVD
NVD
added 2022/09/27 6:15 p.m.43 views

CVE-2021-27853

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

4.7CVSS0.00755EPSS
SaveExploits1References7
OSV
OSV
added 2022/09/27 6:15 p.m.10 views

CVE-2021-27853

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

4.7CVSS5.8AI score0.00755EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2022/09/27 5:55 p.m.10 views

CVE-2021-27853 L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

6.9AI score0.00755EPSS
SaveExploits1References6
CVE
CVE
added 2022/09/27 5:55 p.m.131 views

CVE-2021-27853

CVE-2021-27853 vulnerability affects Layer 2 filtering controls by bypassing VLAN 0 header stacks and LLC/SNAP headers. Arista reports two variants: VLAN 0 header stack variant and LLC header invalid length variant, impacting EOS products, Wi‑Fi access points, and NetVisor OS. Effects include pot...

4.7CVSS4.7AI score0.00755EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2022/09/27 5:55 p.m.49 views

CVE-2021-27853 L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

5.2AI score0.00755EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/09/27 12:00 a.m.10 views

PT-2022-4863 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the implementation of the Ethernet encapsulation protocol, specifically concerning the combination of headers. This could allow ...

4.7CVSS4.6AI score0.00755EPSS
SaveExploits1References14
CNNVD
CNNVD
added 2022/09/27 12:00 a.m.13 views

多款Cisco产品安全漏洞

Cisco IOS and others are products of Cisco Corporation.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system.Cisco Small Business is a switch.Cisco IOS XE Software is an operating system.Cisco Small Business is a switch. Cisco IOS...

4.7CVSS5.2AI score0.00755EPSS
SaveExploits1References9
Arista
Arista
added 2022/09/27 12:00 a.m.112 views

Security Advisory 0080

Security Advisory 0080 . CSAF PDF Date: September 28th 2023 Revision | Date | Changes ---|---|--- 1.5 | September 28th 2023 | Update to include 4.29 to EOS Releases that resolve the CVE's 1.4 | January 11th 2023 | Update the fixed release info of NetVisor OS Software 1.3 | October 24th 2022 |...

4.7CVSS5.1AI score0.00755EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2022/09/27 12:00 a.m.9 views

PT-2022-9878 · Ieee +1 · 802.2 +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows Layer 2 network filtering capabilities, such as IPv6 RA guard, to be bypassed. This can be achieved by utilizing LLC/SNAP headers with...

4.7CVSS4.5AI score0.00664EPSS
SaveExploits0References7
Packet Storm
Packet Storm
added 2022/09/26 12:00 a.m.362 views

WiFi Mouse 1.8.3.4 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wifi Mouse RCE', 'Description' = %q The WiFi Mouse Mouse Server from Necta LLC contains an auth bypass as the authentication is completely...

9.8CVSS9.7AI score0.74016EPSS
SaveExploits6
zdt
zdt
added 2022/09/26 12:00 a.m.3526 views

WiFi Mouse 1.8.3.4 Remote Code Execution Exploit

The WiFi Mouse Mouse Server from Necta LLC contains an authentication bypass as the authentication is completely implemented entirely on the client side. By utilizing this vulnerability, is possible to open a program on the server cmd.exe in our case and type commands that will be executed as the...

9.8CVSS0.2AI score0.74016EPSS
SaveExploits6
Prion
Prion
added 2022/09/19 5:15 p.m.30 views

Remote code execution

Due to a reliance on client-side authentication, the WiFi Mouse Mouse Server from Necta LLC's authentication mechanism is trivially bypassed, which can result in remote code execution...

7.5CVSS9.8AI score0.74016EPSS
SaveExploits6References5Affected Software1
Cvelist
Cvelist
added 2022/09/19 4:50 p.m.54 views

CVE-2022-3218 Necta WiFi Mouse (Mouse Server) client-side authentication bypass

Due to a reliance on client-side authentication, the WiFi Mouse Mouse Server from Necta LLC's authentication mechanism is trivially bypassed, which can result in remote code execution...

10AI score0.74016EPSS
SaveExploits6References5
CVE
CVE
added 2022/09/19 4:50 p.m.546 views

CVE-2022-3218

CVE-2022-3218 concerns the WiFi Mouse (Mouse Server) from Necta LLC, where authentication is implemented entirely on the client side, enabling a bypass that can lead to remote code execution. Multiple connected sources provide concrete details: (1) NVD/NVDC notes a client-side auth bypass allowin...

9.8CVSS9.8AI score0.74016EPSS
SaveExploits6References5Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/19 12:00 a.m.19 views

PT-2022-21141 · Necta Llc · Wifi Mouse

Name of the Vulnerable Software and Affected Versions: WiFi Mouse Mouse Server from Necta LLC affected versions not specified Description: The issue arises due to the WiFi Mouse Mouse Server's reliance on client-side authentication, which allows its authentication mechanism to be easily bypassed...

9.8CVSS9.7AI score0.74016EPSS
SaveExploits6References7
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.28 views

Ubuntu: Security Advisory (USN-5500-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.00813EPSS
SaveExploits5References2
Rows per page
Query Builder