Lucene search
+L

617 matches found

CNNVD
CNNVD
added 2024/04/12 12:00 a.m.11 views

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS Before 21.2R3-S8-EVO, 21.4-EVO through 21.4R3-S6-EVO, 22.2-EVO throug...

7.1CVSS6.6AI score0.00365EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/25 12:00 a.m.12 views

The vulnerability of Cisco IOS XR’s MPLS interface allows a hacker to bypass security restrictions imposed by ACLs.

The vulnerability of MPLS interfaces of the Cisco IOS XR operating system is related to deficiencies in access control based on Access Control Lists ACLs. Exploiting this vulnerability allows a malicious actor to circumvent ACL security restrictions remotely...

5.8CVSS6.2AI score0.00519EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/03/13 5:15 p.m.36 views

CVE-2024-20315

A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...

5.8CVSS5.7AI score0.00519EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/13 5:15 p.m.23 views

Improper access control

A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...

5CVSS7.3AI score0.00519EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/13 4:45 p.m.15 views

CVE-2024-20315

A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...

5.8CVSS7AI score0.00519EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/13 4:45 p.m.41 views

CVE-2024-20315

A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...

5.8CVSS6AI score0.00519EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/03/13 4:00 p.m.65 views

Cisco IOS XR Software MPLS and Pseudowire Interfaces Access Control List Bypass Vulnerabilities

Multiple vulnerabilities in the IP access control list ACL processing in the ingress direction on MPLS and Pseudowire PW interfaces of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. For more information about these vulnerabilities, see the Detail...

5.8CVSS5.8AI score0.00519EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/13 12:00 a.m.11 views

PT-2024-2339 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: The issue is related to insufficient access control on MPLS interfaces in Cisco IOS XR Software, specifically due to improper assignment of lookup keys to internal interface...

5.8CVSS6.6AI score0.00519EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.7 views

Cisco IOS XR Security Vulnerability

Cisco IOS XR is an operating system developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS XR that originates from a security hole in ingress direction IP access control lists ACLs on MPLS and Pseudowire PW interfaces that could allow an unauthenticated, remote...

5.8CVSS6.8AI score0.00486EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/03/08 12:00 a.m.21 views

Cisco NX-OS Buffer Copy without Checking Size of Input (CVE-2024-20267)

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

8.6CVSS7.8AI score0.00926EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/05 12:00 a.m.10 views

The vulnerability of the MPLS traffic processor of the Cisco NX-OS operating system allows a attacker to trigger a service failure.

The vulnerability of the MPLS traffic processor of the Cisco NX-OS operating system is related to copying data into a buffer without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

8.6CVSS7.8AI score0.00926EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/03/01 12:00 a.m.21 views

Cisco NX-OS Software MPLS Encapsulated IPv6 DoS (cisco-sa-ipv6-mpls-dos-R9ycXkwM)

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

8.6CVSS7.8AI score0.00926EPSS
SaveExploits0References5
OSV
OSV
added 2024/02/29 1:43 a.m.3 views

CVE-2024-20267

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

8.6CVSS5.8AI score0.00926EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/29 1:43 a.m.28 views

CVE-2024-20267

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

8.6CVSS8.5AI score0.00926EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/29 1:43 a.m.24 views

Design/Logic Flaw

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

5CVSS7.4AI score0.00926EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/28 4:15 p.m.13 views

CVE-2024-20267

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

8.6CVSS7.4AI score0.00926EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/28 4:15 p.m.31 views

CVE-2024-20267

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

8.6CVSS8.6AI score0.00926EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/28 4:15 p.m.166 views

CVE-2024-20267

CVE-2024-20267 describes a denial-of-service vulnerability in Cisco NX-OS Software related to MPLS traffic handling. The issue arises from insufficient error checking when processing an ingress MPLS frame, enabling an unauthenticated, remote attacker to send a crafted IPv6 packet encapsulated in ...

8.6CVSS8.3AI score0.00926EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
added 2024/02/28 4:00 p.m.41 views

Cisco NX-OS Software MPLS Encapsulated IPv6 Denial of Service Vulnerability

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of prop...

8.6CVSS8.5AI score0.00926EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/01/25 8:13 a.m.66 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

10CVSS7.3AI score0.09141EPSS
SaveExploits17References52
Rows per page
Query Builder