CVE-2019-12000

CVE-2019-12000 relates to the HPE MSE Msg Gw application E-LTU prior to version 3.2, where a potential Remote Access Restriction Bypass exists when HTTPS is used between the USSD and an external USSD service logic application. Affected component: HPE MSE Messaging Gateway (E-LTU); root cause: ins...

CVE-2019-12000

HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an external USSD service logic application. Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging...

Cisco Mobility Services Engine (MSE) Default Password `XmlDba123` for `oracle` account (cisco-sa-20151104-mse-cred) - Active Check

The remote Cisco Mobility Services Engine is prone to an insecure default-password vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Code injection

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...

Code injection

The kernel in Cisco TelePresence Server 3.0 through 4.24.18 on Mobility Services Engine MSE 8710 devices allows remote attackers to cause a denial of service panic and reboot via a crafted sequence of IPv6 packets, aka Bug ID CSCuu46673...

Cisco MSE <= 8.0.120.7 Multiple Vulnerabilities

According to its self-reported version number, the Cisco MSE version installed on the remote host is prior to 8.0.120.7. It is, therefore, affected by multiple vulnerabilities : - A local privilege escalation vulnerability exists due to the program using insecure permissions for binary files duri...

CVE-2015-6316

The default configuration of sshdconfig in Cisco Mobility Services Engine MSE through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501...

CVE-2015-4282

Cisco Mobility Services Engine MSE through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504...

CVE-2015-4282

Cisco Mobility Services Engine (MSE)

CVE-2015-6316

Cisco Mobility Services Engine (MSE) is affected by CVE-2015-6316 due to a default sshd_config setting that allows login via the oracle account with a hard-coded password. The issue affects MSE versions up to and including 8.0.120.7, enabling remote attackers to obtain access by authenticating as...

CVE-2015-4282

Cisco Mobility Services Engine MSE through 8.0.120.7 uses weak permissions for unspecified binary files, which allows local users to obtain root privileges by writing to a file, aka Bug ID CSCuv40504...

Cisco TelePresence Server Denial of Service Vulnerability (cisco-sa-20150916-tps)

Cisco TelePresence Server contains a buffer overflow vulnerability in the Conference Control Protocol API that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a...

Using BitTorrent Vulnerabilities to Launch Distributed Reflective DoS Attacks

Researchers warn that several protocols used by the peer-to-peer file sharing service BitTorrent, including a handful of clients that run the protocol, can be leveraged to carry out distributed reflective denial of service DRDoS attacks. Distributed reflective denial of service, or DRDoS attacks,...

Cisco TelePresence MSE 8000 Device Cross-Site Request Forgery Vulnerability

The Cisco TelePresence MSE 8000 devices are a suite of high-capacity voice and video conferencing media services engine appliances. A cross-site request forgery vulnerability exists in the Cisco TelePresence MSE 8000 devices, which allows remote attackers to construct malicious URIs, trick users...

CVE-2015-4263

The Control and Provisioning functionality in Cisco Mobility Services Engine MSE 10.00.1 allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851...

CVE-2015-4263

Cisco Mobility Services Engine (MSE) 10.0(0.1) contains a vulnerability in the Control and Provisioning feature that allows remote authenticated users to read log files and obtain sensitive information. The root cause is sensitive data being included in certain log files. An attacker must authent...

CVE-2015-4263

The Control and Provisioning functionality in Cisco Mobility Services Engine MSE 10.00.1 allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851...

CVE-2015-4258

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444...

CVE-2015-4258

The CVE-2015-4258 CSRF vulnerability affects Cisco TelePresence MSE 8000 Series. The issue arises from insufficient CSRF protection, enabling unauthenticated remote attackers to trick users into performing actions within the web interface, effectively hijacking user sessions. Affected component i...