CVE-2021-0289

The CVE-2021-0289 issue in Juniper Junos OS is a TOCTOU race condition between the Device Control Daemon (DCD) and the firewall process (dfwd) that can bypass a user-defined ARP Policer on AE interfaces. Affected software includes Junos OS across multiple releases (from 5.6R1 up to but excluding ...

CVE-2021-0287

CVE-2021-0287 affects Juniper Networks Junos OS and Junos OS Evolved in SR-ISIS/MPLS with ISIS Flexible Algorithm and sensor-based statistics. A flap of an ISIS link can crash and restart the RPD, causing Denial of Service (DoS). Affected versions include Junos OS: 19.4 prior to 19.4R1-S4 and 19....

SonicWall warns users of “imminent ransomware campaign”

This post has been updated with a statement from SonicWall below SonicWall has issued an urgent security notice warning users of unpatched End-Of-Life EOL SRA & SMA 8.X remote access devices that they have been made aware of an imminent ransomware campaign using stolen credentials. The exploitati...

Aruba Instant (IAP) - Remote Code Execution

import socket import sys import struct import time import threading import urllib3 import re import telnetlib import xml.etree.ElementTree as ET import requests urllib3.disablewarnings CONTINUERACE = True SNPRINTFCREATEFILEMAXLENGTH = 245 def racepapimessageip: global CONTINUERACE payload =...

CVE-2021-22782

CVE-2021-22782 is a Missing Encryption of Sensitive Data vulnerability affecting Schneider Electric products, including EcoStruxure Control Expert (Unity Pro), EcoStruxure Process Expert, and SCADAPack RemoteConnect for x70. The issue allows information disclosure of network/process data, credent...

With 5G coming, it’s time to plug security gaps

With 5G introducing new risks, many are finding they don’t have the visibility, tooling or resources to manage such networks securely...

Arbitrary File Read Vulnerability in Rendezvous Network Security Management System

Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An arbitrary file read vulnerability exists in the Renzi Network...

Aruba AOS-CX command injection vulnerability

Aruba AOS-CX is a modern programmable network from Aruba, USA. A security vulnerability exists in the Aruba AOS-CX, details of this vulnerability are not available at this time, please follow the vendor's homepage for more information...

CVE-2021-21994

CVE-2021-21994 affects VMware ESXi via SFCB authentication bypass. A remote attacker with network access to port 5989 can bypass SFCB authentication by a crafted request. VMware's VMSA-2021-0014 provides patched versions: ESXi 7.0 (ESXi70U2-17630552), ESXi 6.7 (ESXi670-202103101-SG), and ESXi 6.5...

Trickbot Malware Returns with a new VNC Module to Spy on its Victims

Cybersecurity researchers have opened the lid on the continued resurgence of the insidious Trickbot malware, making it clear that the Russia-based transnational cybercrime group is working behind the scenes to revamp its attack infrastructure in response to recent counter efforts from law...

Directory Traversal Vulnerability in China Unicom China169

CHINA169 is based on the former China Telecom China Broadband Internet CHINANET's interconnection network in the ten northern provinces, and after large-scale reconstruction and expansion, it has formed a brand-new network with a new structure, which can vigorously dredge up broadband services,...

Wibu-Systems CodeMeter Runtime

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Wibu-Systems AG Equipment: CodeMeter Runtime Vulnerabilities: Buffer Over-read 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to read data from the heap of...

Siemens SINUMERIK ONE and SINUMERIK MC (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SINUMERIK ONE and SINUMERIK MC Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

Fortinet FortiManager and FortiAnalyzer Buffer Overflow Vulnerability

Fortinet FortiManager and FortiAnalyzer are both products of Fortinet, a centralized network security management platform, and FortiAnalyzer, a centralized network security reporting solution. FortiManager and FortiAnalyzer have a buffer overflow vulnerability, which can be exploited by attackers...

SQL injection vulnerability in Qixingchen Tianyue network security audit system (CNVD-2021-55197)

Providence Peak Network Security Audit System is a compliance management system for fine-grained auditing of users' operations on core IT assets and servers in the network under business environment. A SQL injection vulnerability exists in Tianyue Network Security Audit System, which can be...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50188)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that originates from the product's failure to perform security checks on user input...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50185)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that arises from the web interface of the product's ClearPass feature failing to...

H3C Aolynk BR304+ has a weak password vulnerability

The H3C Aolynk BR304+ is a network security router. A weak password vulnerability exists in the H3C Aolynk BR304+, which can be exploited by an attacker to obtain sensitive information...

Critical Flaws Reported in Philips Vue PACS Medical Imaging Systems

Multiple security vulnerabilities have been disclosed in Philips Clinical Collaboration Platform Portal aka Vue PACS, some of which could be exploited by an adversary to take control of an affected system. "Successful exploitation of these vulnerabilities could allow an unauthorized person or...

Aruba ClearPass Policy Manager Command Execution Vulnerability (CNVD-2021-50093)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager that can be exploited by an attacker to arbitrarily run commands on the underlying host...