Lucene search
+L

1552 matches found

NVD
NVD
added 2021/03/24 8:15 p.m.27 views

CVE-2021-1446

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

8.6CVSS0.01494EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/24 8:15 p.m.28 views

Design/Logic Flaw

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

7.1CVSS7.6AI score0.01494EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/03/24 8:06 p.m.20 views

CVE-2021-1446 Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

8.6CVSS7AI score0.01494EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/24 8:06 p.m.89 views

CVE-2021-1446

CVE-2021-1446 describes a denial-of-service vulnerability in the DNS Application Layer Gateway (ALG) functionality used by NAT in Cisco IOS XE software. The issue arises from a logic error when the device inspects certain DNS packets; an unauthenticated, remote attacker can exploit this by sendin...

8.6CVSS7.9AI score0.01494EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/24 8:06 p.m.34 views

CVE-2021-1446 Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

8.6CVSS8.7AI score0.01494EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/03/24 4:00 p.m.92 views

Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

8.6CVSS7.9AI score0.01494EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/11 4:15 p.m.16 views

CVE-2021-26879

Windows Network Address Translation NAT Denial of Service Vulnerability...

7.5CVSS0.03596EPSS
SaveExploits0References2
CVE
CVE
added 2021/03/11 3:41 p.m.112 views

CVE-2021-26879

CVE-2021-26879 is described across the provided documents as a Windows Network Address Translation (NAT) Denial of Service vulnerability. The materials consistently reference the issue at the Windows NAT level, identifying the vulnerability and its impact as a DoS condition, but they do not speci...

7.5CVSS8.2AI score0.03596EPSS
SaveExploits0References2Affected Software5
ThreatPost
ThreatPost
added 2021/01/27 8:32 p.m.311 views

Remote Attackers Can Now Reach Protected Network Devices via NAT Slipstreaming

Disconnecting devices from the internet is no longer a solid plan for protecting them from remote attackers. A new version of a known network-address translation NAT slipstreaming attack has been uncovered, which would allow remote attackers to reach multiple internal network devices, even if tho...

6.8CVSS0.7AI score0.01426EPSS
SaveExploits0References7
The Hacker News
The Hacker News
added 2021/01/27 12:58 p.m.102 views

New Attack Could Let Remote Hackers Target Devices On Internal Networks

A newly devised variant of the NAT Slipstreaming attack can be leveraged to compromise and expose any device in an internal network, according to the latest research. Detailed by enterprise IoT security firm Armis, the new attack CVE-2020-16043 and CVE-2021-23961 builds on the previously disclose...

8.8CVSS0.8AI score0.01426EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2021/01/27 12:58 p.m.9 views

New Attack Could Let Remote Hackers Target Devices On Internal Networks

A newly devised variant of the NAT Slipstreaming attack can be leveraged to compromise and expose any device in an internal network, according to the latest research. Detailed by enterprise IoT security firm Armis, the new attack CVE-2020-16043 and CVE-2021-23961 builds on the previously disclose...

8.8CVSS7.7AI score0.01426EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/01/26 12:00 a.m.36 views

openSUSE Security Update : virtualbox (openSUSE-2021-165)

This update for virtualbox fixes the following issues : Version update to 6.1.18 released January 19 2021 This is a maintenance release. The following items were fixed and/or added : - Nested VM: Fixed hangs when executing SMP nested-guests under certain conditions on Intel hosts bug 19315, 19561...

8.2CVSS7.4AI score0.00495EPSS
SaveExploits0References4
Fedora
Fedora
added 2021/01/20 1:33 a.m.63 views

[SECURITY] Fedora 33 Update: coturn-4.5.2-1.fc33

The Coturn TURN Server is a VoIP media traffic NAT traversal server and gat eway. It can be used as a general-purpose network traffic TURN server/gateway, to o. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relayin...

7.2CVSS0.8AI score0.01318EPSS
SaveExploits3
Fedora
Fedora
added 2021/01/20 1:28 a.m.59 views

[SECURITY] Fedora 32 Update: coturn-4.5.2-1.fc32

The Coturn TURN Server is a VoIP media traffic NAT traversal server and gat eway. It can be used as a general-purpose network traffic TURN server/gateway, to o. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relayin...

7.2CVSS0.8AI score0.01318EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2021/01/20 12:00 a.m.39 views

Fedora: Security Advisory for coturn (FEDORA-2021-32d0068851)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.2CVSS7AI score0.01318EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2021/01/20 12:00 a.m.14 views

Fedora: Security Advisory for coturn (FEDORA-2021-dee141fc61)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.2CVSS7AI score0.01318EPSS
SaveExploits3References2
OSV
OSV
added 2020/12/24 4:15 p.m.20 views

CVE-2020-27720

On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when processing NAT66 traffic with Port Block Allocation PBA mode and SP-DAG enabled, and dag-ipv6-prefix-len configured with a value less than the default of 128, an undisclosed traffic pattern may...

7.5CVSS7.1AI score0.01423EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
added 2020/12/22 3:02 p.m.212 views

UPnP With a Holiday Cheer

T'was the night before HaXmas, when all through the house, Not a creature was stirring, not even a mouse. The stockings were hung by the chimney with care, in hopes that St. Nicholas soon would be there. This may be the way you start your holiday cheer, but before you get started, let me make you...

7.1AI score
SaveExploits0
SonicWall
SonicWall
added 2020/12/15 9:41 p.m.49 views

NAT Slipstreaming (CVE-2020-28041)

SonicWall Firewalls are not vulnerable to the NAT Slipstreaming attack.SonicWall Firewall does not open an alternative port set in the SIP packet header, results in an invalid connection, and packets are dropped. CVE: CVE-2020-28041 Last updated: Dec. 15, 2020, 9:41 p.m...

4.3CVSS6.8AI score0.01999EPSS
SaveExploits1
NVD
NVD
added 2020/11/24 7:15 p.m.35 views

CVE-2020-28333

Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Versions: 2.5.1.8. The Barco wePresent WiPG-1600W web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a "SEID" token that is appended to the end of URLs in GET...

9.8CVSS9.3AI score0.03239EPSS
SaveExploits2References2
Rows per page
Query Builder