EJBCA 安全漏洞

EJBCA is an open source Public Key Infrastructure PKI and Certificate Authority CA software from Keyfactor Open Source. A security vulnerability exists in EJBCA versions prior to 8.3.1 that stems from the length of the salt value in the CMP CLI client does not comply with the security requirement...

PT-2024-26877 · Keyfactor · Keyfactor Ejbca

Name of the Vulnerable Software and Affected Versions: KeyFactor EJBCA versions prior to 8.3.1 Description: The issue concerns the CMP CLI client in KeyFactor EJBCA, which has a hardcoded salt that is only 6 octets long. This is not compliant with the security requirements of RFC 4211, which...

CVE-2024-43388

A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation...

PT-2024-30548 · Mguard · Mguard

Name of the Vulnerable Software and Affected Versions: mGuard devices versions prior to firmware 8.9.3 or 10.4.1 Description: A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation. This issue allows hackers to access confidential...

PHOENIX CONTACT FL/TC MGUARD 代码注入漏洞

The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX CONTACT, Germany. A code injection vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD that originates from improper input validation, which allows a low-privileged remote attacker with write access to reconfigure the SNMP...

The vulnerability of the handle_ipv6IpForwarding() function in the Net-SNMP software suite for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the handleipv6IpForwarding function in the Net-SNMP software suite for the Linux operating system is related to a NULL Pointer Exception issue. This exception can be exploited by an attacker through a specially created UDP packet to cause a service failure. Exploiting this...

The vulnerability of the NET-SNMP-VACM-MIB() function in the Net-SNMP software suite for the Linux operating system allows a attacker to compromise the integrity of the system.

The vulnerability of the NET-SNMP-VACM-MIB function in the Net-SNMP software suite for the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the system...

PT-2024-29997 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba Access Point versions affected versions not specified Description: Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the...

Command or parameter injection via unique embedded switch SNMP commands (CVE-2024-5461)

Implementation of the Simple Network Management Protocol SNMP operating on the Brocade 6547 FC5022 embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only...

qemu-kvm: 'qemu-img info' leads to host file read/write

A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write ...

CVE-2024-39528

A Use After Free vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to cause a Denial of Service DoS.On all Junos OS and Junos Evolved platforms, if a routing-instance deactivation is triggered, and at...

CVE-2024-5460

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community...

Schneider Electric SpaceLogic AS-P 日志信息泄露漏洞

The Schneider Electric SpaceLogic AS-P is an automation server from Schneider Electric France. The Schneider Electric SpaceLogic AS-P/AS-B suffers from a log message disclosure vulnerability that can be exploited by an attacker to cause SNMP credentials to be exposed...

The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) for Cisco IOS and Cisco IOS XE operating systems allows a attacker to circumvent security restrictions and gain access to privileged networks.

The vulnerability of the implementation of the Simple Network Management Protocol SNMP for Cisco IOS and Cisco IOS XE operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain access to...

Fabric OS versions prior to v9.0 have default community strings (CVE-2024-5460)

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community...

CVE-2024-31472

There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's Access Point management protocol UDP port 8211. Successful exploitation of these...

CVE-2024-31475

There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI Aruba's access point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to...

CVE-2024-31469

There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's Access Point management protocol UDP port 8211. Successful exploitation of these...

CVE-2024-31474

Summary: CVE-2024-31474 is an arbitrary file deletion vulnerability in the CLI service accessed by Aruba’s PAPI protocol used on ArubaOS/InstantOS Aruba Access Points. The vulnerability allows deletion of arbitrary files on the underlying OS, potentially interrupting normal operation and impactin...

CVE-2024-31473

There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's Access Point management protocol UDP port 8211. Successful exploitation of this...