The vulnerability of the queue formation mechanism for bufferring frames in Wi-Fi packet buffering technology, which is related to the use of weak encryption, allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the mechanism for scheduling buffer allocations for Wi-Fi packet buffering technology is related to the use of weak encryption. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack...

Security Bulletin: OpenSSL vulnerability in IBM SAN Volume Controller and Storwize Family (CVE-2014-0224)

Summary Security vulnerability in OpenSSL Vulnerability Details CVEID: CVE-2014-0224 DESCRIPTION : SSL/TLS MITM vulnerability An attacker using a carefully crafted handshake can force the use of weak keying material in OpenSSL SSL/TLS clients and servers. This can be exploited by a...

Security Bulletin: Vulnerabilities in SSL and TLS protocols affects SAN Volume Controller and Storwize Family (CVE-2011-3389)

Summary Security Bulletin: Vulnerabilities in SSL and TLS protocols affects SAN Volume Controller and Storwize Family CVE-2011-3389 Vulnerability Details Security Bulletin --- Summary --- SSL and TLS vulnerabilities were disclosed in September 2011. This vulnerability has been referred to as the...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM SAN Volume Controller and Storwize Family (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM SAN Volume Controller and Storwize Family Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by th...

Revoked 'known_hosts' SSH Key Detection (Linux/Unix SSH Login)

The remote host is using a revoked SSH keys in a SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Analyzer probe component of the software for data analysis and processing in Hitachi Ops Center Analyzer, as well as the Analytics probe component of the software for maintaining the operation of Hitachi Infrastructure Analytics Advisor (HIAA), allows a perpetrator to carry out a “man-in-the-middle” type attack.

The vulnerability of the Analyzer probe component of the Hitachi Ops Center Analyzer software for data analysis and processing, as well as the Analytics probe component of the Hitachi Infrastructure Analytics Advisor HIAA software for data processing, is related to errors in the certificate...

PT-2023-4567

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description The function X509 VERIFY PARAM add0 policy is documented to implicitly enable the certificate policy check when doing certificate verification. However, the implementation of the function doe...

Security Bulletin: TS2900 is affected by the following OpenSSL vulnerabilities: CVE-2014-0224

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details CVE-2014-0224 DESCRIPTION: OpenSSL is vulnerable to a man-in-the-middle attack, caused by the use of weak keying material in SSL/TLS clients and server...

openSUSE 15 Security Update : libgit2 (SUSE-SU-2023:1570-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:1570-1 advisory. - CVE-2023-22742: Fixed SSH keys verification failure bsc1207364. Tenable has extracted the preceding description block directly from the SUSE security...

CVE-2023-22812

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data...

Code injection

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data...

Western Digital SanDisk PrivateAccess 加密问题漏洞

Western Digital SanDisk PrivateAccess is a secure access software from Western Digital. A security vulnerability exists in Western Digital SanDisk PrivateAccess versions prior to 6.4.9 that stems from the system's support for the insecure TLS 1.0 and TLS 1.1 protocols, which are susceptible to...

CVE-2023-22812 SanDisk PrivateAccess Deprecated TLS protocol versions supported

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data...

PT-2023-18710 · Sandisk · Sandisk Privateaccess

Name of the Vulnerable Software and Affected Versions: SanDisk PrivateAccess versions prior to 6.4.9 Description: The issue concerns the support of insecure TLS 1.0 and TLS 1.1 protocols, making the system susceptible to man-in-the-middle attacks. This compromises the confidentiality and integrit...

CVE-2023-22812: Use of a Broken or Risky Cryptographic Algorithm

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data...

CVE-2023-22812 SanDisk PrivateAccess Deprecated TLS protocol versions supported

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data...

MAN-EAM-0003 代码问题漏洞

Güralp Systems MAN-EAM-0003 is a sensor from Güralp Systems. A security vulnerability exists in MAN-EAM-0003 version V3.2.4 that stems from the presence of an XML External Entity Injection XXE vulnerability...

Medium: nginx

Issue Overview: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can...

CVE-2022-38458

A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information...

CVE-2022-38458

CVE-2022-38458 affects Netgear Orbi Router RBR750 (4.6.8.5). Talos documented a cleartext transmission vulnerability in Remote Management that enables MITM-based disclosure of sensitive data. The TALOS-2022-1598 advisory confirms the vulnerability details and notes that vulnerability appears in t...