CVE-2017-2878

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2878

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2878

CVE-2017-2878 affects the Foscam C1 Indoor HD Camera web management interface. The issue is a buffer overflow in the CGIProxy.fcgi logOut path: a user-supplied username (buffer size up to 0x40) is copied into a 0x20-byte field via strcpy, allowing an attacker—requiring at least a visitor-privileg...

PT-2018-7223

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the web management interface of the affected device. It can be triggered by a specially crafted HTTP request, potentially allowing an attacker to...

CVE-2017-2873: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting...

CVE-2017-2878: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

PT-2018-7218

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A command injection issue exists in the web management interface of the affected device. It can be triggered by sending a specially crafted HTTP request, allowing an attacker to inject...

PT-2018-2283 · Cisco · Cisco Small Business Routers

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could...

Management Interface Buffer Overflow Vulnerability in Various Cisco Routers

The Cisco RV110W, RV130W, and RV215W are all Cisco router products. A buffer overflow vulnerability exists in the management interface of several Cisco routers due to improper boundary restrictions on user-supplied input in the Guest user function of the web-based management interface. An attacke...

Management Interface Buffer Overflow Vulnerability in Various Cisco Routers

The Cisco RV110W, RV130W, and RV215W are all Cisco router products. A buffer overflow vulnerability exists in the management interface of several Cisco routers, which is caused by improperly restricting the boundaries of user-supplied inputs in the Guest user function of the web-based management...

Directory traversal

The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP formerly TOUGHSwitch allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerability to gain root privileges. This...

Cisco Tetration Analytics Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for t...

Cisco Cloud Services Platform 2100 Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to perform command injection. The vulnerability is due to insufficient input validation of command input. An attacker could exploit this vulnerability by sendi...

Multiple Vulnerabilities in Cisco Packaged Contact Center Enterprise

Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface or conduct a cross-site request forgery CSRF attack. For more...

Cisco RV110W, RV130W, and RV215W Routers Management Interface Buffer Overflow Vulnerability

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a denial of service condition or to execute arbitrar...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

PT-2018-1698

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified...

PT-2018-1695

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified...

PT-2018-1697

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified...

PT-2018-1696

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV130W Wireless-N Multifunction VPN Router versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified...