523 matches found
CVE-2023-20047
CVE-2023-20047 affects Cisco Webex Room Phone and Cisco Webex Share with an LLDP memory/resource allocation flaw. An unauthenticated, adjacent attacker can send crafted LLDP traffic to exhaust memory, crash the LLDP process, and potentially interrupt inbound/outbound calling if LLDP is the only p...
CVE-2023-20047
A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco Webex Room Phone and Cisco Webex Share devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient resource...
The vulnerability of Microprogrammed Ethernet Switchboard software, related to memory release errors, allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed Ethernet switch software from FortiSwitch is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted LLDP/CDP/EDP packets...
Cisco Webex Room Phone and Cisco Webex Share Link Layer Discovery Protocol Memory Leak Vulnerability
A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco Webex Room Phone and Cisco Webex Share devices could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient resource...
CVE-2022-4338
A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a data underflow...
CVE-2022-4337
A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a denial of service...
CVE-2022-20686
Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...
Input validation
Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...
Input validation
Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...
Cisco Warns of High-Severity Unpatched Flaw Affecting IP Phones Firmware
Cisco has released a new security advisory warning of a high-severity flaw affecting IP Phone 7800 and 8800 Series firmware that could be potentially exploited by an unauthenticated attacker to cause remote code execution or a denial-of-service DoS condition. The networking equipment major said...
CVE-2022-20687
Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...
CVE-2022-20687
CVE-2022-20687 affects Cisco ATA 190 Series Analog Telephone Adapter firmware, targeting the LLDP functionality. The issue arises from missing length validation of LLDP packet header fields and a buffer overflow read, allowing an unauthenticated, remote attacker to execute arbitrary code on the d...
CVE-2022-20686
CVE-2022-20686 affects Cisco ATA 190 Series Analog Telephone Adapter firmware, specifically the LLDP functionality. The root cause is missing length validation in certain LLDP packet header fields, allowing an unauthenticated, remote attacker to execute arbitrary code on the device and cause the ...
HTML injection possible via LLDP
Description An unmanaged/foreign neighbouring device that is advertising its presence with LLDP can inject malicious HTML code into LibreNMS by setting its System Name TLV to whatever snippet is to be injected. This is assuming that a device that is managed by LibreNMS has LLDP and the...
Cisco ATA 190 LLDP Packet Input Validation Error Vulnerability
The Cisco ATA 190 is an analog phone adapter from Cisco, U.S.A. An input validation error vulnerability exists in the Cisco ATA 190 Series, which stems from a lack of length validation in certain LLDP packet header fields. An unauthenticated, remote attacker could exploit the vulnerability to...
Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities
Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP for Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to execute code, cause the service to reload unexpectedly, or cause Cisco Discovery Protocol or LLDP database corrupti...
CVE-2022-23686
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...
CVE-2022-23689
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...
CVE-2022-23687
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...
CVE-2022-23686
Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...