889 matches found
The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a attacker to trigger a service failure.
The vulnerability of IGMPv3 protocols in real-time operating systems like Wind River VxWorks is related to an array indexing error. Exploiting this vulnerability could allow a malicious actor to cause service failure by renaming “NULL” as IGMP...
net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service
snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...
CVE-2019-16069
A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through the SNMP protocol...
Moxa AWK-3131A Authentication Bypass Vulnerability
Moxa AWK-3131A is a wireless access device from Moxa. A security vulnerability exists in the handling of host names in the Moxa AWK-3131A using firmware version 1.13. An attacker can exploit this vulnerability to bypass authentication by sending an authenticated SNMP request...
Mini-SNMPD Out-of-Bounds Read Vulnerability
Mini-SNMPD is a lightweight implementation of the Simple Network Management Protocol SNMP server. An out-of-bounds read vulnerability exists in the way Mini-SNMPD 1.4 parses incoming SNMP packets. An attacker could exploit this vulnerability by sending specially crafted packets to cause sensitive...
Mini-SNMPD socket disconnect denial-of-service vulnerability
Summary A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP connections can trigger a stack overflow, resulting in a denial of service. To trigger this vulnerability, an attacker needs to simply initiate...
CVE-2019-16027
A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the ISIS process. The vulnerability is due to improper...
CVE-2020-1600
In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...
CVE-2019-6688
On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5 and BIG-IQ versions 6.0.0-6.1.0 and 5.2.0-5.4.0, a user is able to obtain the secret that was being used to encrypt a BIG-IP UCS backup file while sending SNMP query to the BIG-IP...
The vulnerability of the `snmp_oid_compare` function in the software for deploying and using the SNMP protocol Net-SNMP allows a intruder to trigger a service failure.
The vulnerability of the snmpoidcompare function in the "snmplib/snmpapi.c" software for deploying and using the SNMP protocol Net-SNMP is related to a NULL pointer dereferencing error. Exploiting this vulnerability could allow an attacker to deny service through a specially created UDP packet...
Schneider Electric Modicon M580 UMAS REST API getcominfo denial-of-service vulnerability
Summary An exploitable denial of service vulnerability exists in the UMAS REST API getcominfo functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.80. A specially crafted HTTP request can cause the device to enter a non-recoverable fault...
DEBIAN-CVE-2018-14464
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...
UBUNTU-CVE-2018-14464
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...
The vulnerability of the implementation of the simple network management protocol SNMP in the Cisco NX-OS operating system’s ACL function allows a attacker to influence the integrity of the protected information.
The vulnerability of the implementation of the simple network management protocol SNMP in the Cisco NX-OS operating system stems from incorrect checking of the name of the ACL with a maximum length. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the integrity ...
The vulnerability of TP-Link’s microprogrammed software in routers, which stems from insufficient validation of input data, allows attackers to circumvent the separation between the host network and the guest network.
The vulnerability of TP-Link’s microprogrammed routing software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to bypass the separation between the host network and the guest network using the IGMP protocol...
CVE-2019-1969
A vulnerability in the implementation of the Simple Network Management Protocol SNMP Access Control List ACL feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The...
Cisco NX-OS Software and Cisco FXOS Software Input Validation Error Vulnerability
Cisco Firepower 4100 Series and others are products of Cisco Corporation.Cisco Firepower 4100 Series is a 4100 series firewall appliance.Cisco FXOS Software is a set of firewall software running in Cisco security appliances.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco MDS 9000...
Cisco NX-OS Software Privilege License and Access Control Issues Vulnerability
Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A permission and access control issue vulnerability exists in the Simple Network Management Protocol Access Control Column feature of Cisco NX-OS Software, which can be...
CVE-2019-9931
Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device...
CVE-2019-1963
A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper...