ERROR_NO_DEVICE_ID is thrown while trying to load a driver using Veeam Agent Recovery Media

Challenge When performing a Bare Metal Recovery, storage or network devices are not visible in the system, and when attempting to load device drivers, the following error occurs: Failed to install driver from INF file Failed to install driver. Error code: ERRORNODEVICEID Solution Verify Correct...

Design/Logic Flaw

An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack...

Denial of Service Vulnerability in Hikvision Video Playback Library SDK

Hikvision Playback Library SDK is a secondary development kit related to playback of Hikvision embedded network DVRs, video servers, and supporting products for IP devices. A denial of service vulnerability exists in the Hikvision Video Playback Library SDK. An attacker can exploit the...

CVE-2018-7066

CVE-2018-7066 describes an unauthenticated remote command execution in Aruba ClearPass Policy Manager via the OnConnect feature. A defect in the API used to link other network devices (configuration under CLI Settings for linked devices) could allow a remote attacker to execute arbitrary commands...

CVE-2018-6983

VMware Workstation 15.x before 15.0.2 and 14.x before 14.1.5 and Fusion 11.x before 11.0.2 and 10.x before 10.1.5 contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on the host...

Integer overflow

VMware Workstation 15.x before 15.0.2 and 14.x before 14.1.5 and Fusion 11.x before 11.0.2 and 10.x before 10.1.5 contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on the host...

CVE-2018-6983

VMware Workstation 15.x before 15.0.2 and 14.x before 14.1.5 and Fusion 11.x before 11.0.2 and 10.x before 10.1.5 contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on the host...

CVE-2018-6983

VMware Workstation 15.x before 15.0.2 and 14.x before 14.1.5 and Fusion 11.x before 11.0.2 and 10.x before 10.1.5 contain an integer overflow vulnerability in the virtual network devices. This issue may allow a guest to execute code on the host...

VMSA-2018-0030:VMware Workstation and Fusion updates address an integer overfLOW issue.

VMSA-2018-0030 VMware Workstation and Fusion updates address an integer overflow issue. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0030 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware Workstation and Fusion updates address an...

Cross site scripting

Cross-site scripting vulnerability in multiple FXC Inc. network devices Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Powe...

CVE-2018-0679

Cross-site scripting vulnerability in multiple FXC Inc. network devices Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Powe...

CVE-2018-0679

Cross-site scripting vulnerability in multiple FXC Inc. network devices Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Powe...

CVE-2018-0679

CVE-2018-0679 describes a stored cross-site scripting vulnerability in multiple FXC Inc. network devices. The affected products/firmware are: Managed Ethernet switch FXC5210/5218/5224 (before Ver1.00.22), FXC5426F (before Ver1.00.06), FXC5428 (before Ver1.00.07), PoE switches FXC5210PE/5218PE/522...

NCCIC Webinar Series on Protecting Enterprise Network Infrastructure Devices

NCCIC is conducting a series of webinars on protecting enterprise network infrastructure devices over the next two weeks. Each webinar will be held from 1-2:30 p.m. ET on the dates listed below: Monday, September 24 Thursday, September 27 Tuesday, October 2 Thursday, October 4 NCCIC encourages...

Multiple script injection vulnerabilities in multiple Yamaha network devices

Overview The management screen of multiple network devices provided by Yamaha Corporation contains multiple script injection vulnerabilities CWE-74. The following researchers reported the vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#69967692: Multiple script injection vulnerabilities in multiple Yamaha network devices

The management screen of multiple network devices provided by Yamaha Corporation contains multiple script injection vulnerabilities CWE-74. Impact In the case where multiple administrators manage an affected device, an administrator with malicious intent may embed an arbitrary script into the...

VPNFilter botnet

On May 23, 2018, Talos disclosed in a blog post the discovery of a modular malware system they deemed "VPNFilter", affecting multiple network devices wordwide, and embedding Botnet capabilities...

Xen xen-netback xenvif_set_hash_mapping Integer Overflow Exploit

Exploit for multiple platform in category dos / poc Xen: integer overflow in xen-netback xenvifsethashmapping The xen-netback linux kernel module is the default backend for Xen's virtual network devices. Since commit 40d8abdee806d496a60ee607a6d01b1cd7fabaf0 the backend supports an additional...

What I expect from IT Asset Inventory

The main problem of vulnerability management, in my opinion, is that it is not always clear whether we know about ALL network hosts existing in our infrastructure or not. So, not the actual process of scanning and the detection of vulnerabilities, but the lack of knowledge what we should scan...

Global Threats to Information Systems

The advanced capabilities of organized hacker groups and cyber threat actors are an increasing global threat to information systems. Rising threat levels place more demands on cybersecurity personnel and network administrators to protect information systems. Protecting network infrastructure is...