Information disclosure

Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and access the REST A...

CVE-2022-34424

Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system crash by running particular security scans...

CVE-2022-34424

Dell SmartFabric OS10 (Networking OS10) versions 10.5.1.x through 10.5.3.x contain a vulnerability that could cause a system crash when running certain security scans. Root cause details are not provided in the available documents beyond the impact description. CVSS v3.1 base score is 7.5 (HIGH) ...

CVE-2022-34424

Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system crash by running particular security scans...

CVE-2022-29089

Summary (CVE-2022-29089) Dell Networking OS10 with Smart Fabric Services enabled is affected. Prior to October 2021 releases have an information-disclosure vulnerability that could allow a remote, unauthenticated attacker to reverse‑engineer to obtain sensitive data and potentially access the RES...

CVE-2022-29089

Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and access the REST A...

CVE-2022-29089

Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and access the REST A...

PT-2022-19405 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell Networking OS10 versions prior to October 2021 Description: The issue allows a remote, unauthenticated attacker to potentially exploit it by reverse engineering to retrieve sensitive information and access the REST API with admin...

Dell SmartFabric OS10 信任管理问题漏洞

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL. A security vulnerability exists in Support Assist in Dell Networking OS10 version 10.5.3.4. An unauthenticated, remote attacker could exploit this vulnerability to access limited switch configuration data and...

Cisco Access Points 安全漏洞

Cisco Access Points is a network access point device from Cisco. A security vulnerability exists in Cisco Access Points that originates from an attacker bypassing a VLAN and then bypassing Catalyst Access Point filtering rules to send malicious data...

Security Bulletin: Vulnerability in Transport Layer Security Protocol Used in IBM System Networking Ethernet Switches (CVE-2011-3389)

Abstract Earlier versions of the Transport Layer Security TLS protocol are affected by a publicly disclosed vulnerability that could allow information disclosure if an attacker is carrying out a man-in-the-middle attack. Customers can avoid the vulnerability by following workarounds recommended b...

Security Bulletin: Vulnerability in OSPFv2 Routing Protocol Used in IBM System Networking Ethernet Switches (CVE-2013-5385)

Abstract Many IBM System Networking Ethernet switches use the OSPFv2 routing protocol, which has an ambiguity that can be exploited to allow network traffic to be black-holed and/or redirected. Remediation for this vulnerability consists of updating the IBM Networking Operating System NOS running...

PT-2022-6279 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration, such as redirecting egress packets to ingress using TC action "mirred", a...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Asset and Service Management

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 5, 6, 7, and 8 that are used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Asset Management for Energy Optimization, Maximo Industry Solutions including Maximo for Government, Maximo...

Arbitrary Code Execution

d8s-urls is vulnerable to arbitrary code execution. The vulnerability exists because the democritus-networking package of a specific version of d8s-urls acts as a potential code execution third party backdoor which allows an attacker to inject and execute malicious codes in to the system...

Arbitrary Code Execution

d8smpeg is vulnerable to arbitrary code execution. The vulnerability exists because the democritus-networking package of a specific version of d8smpeg acts as a potential code execution backdoor which allows an attacker to inject and execute malicious codes in to the system...

Arbitrary Code Execution

d8sipaddresses is vulnerable to arbitrary code execution. The vulnerability exists because the democritus-networking package of a specific version of d8s-archives acts as a potential code execution backdoor which allows an attacker to inject and execute malicious codes in to the system...

Arbitrary Code Execution

d8sutility is vulnerable to arbitrary code execution. The vulnerability exists because the democritus-networking package of a specific version of d8sutility acts as a potential code execution backdoor which allows an attacker to inject and execute malicious codes in to the system...

Arbitrary Code Execution

d8sutility is vulnerable to arbitrary code execution. The vulnerability exists due to the use of democritus-networking package of a specific version of d8sutility which acts as a potential code execution backdoor and allows an attacker to inject and execute malicious codes in to the system...

PT-2024-8455 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the Linux kernel's enetc driver, which allows for the configuration of TSN features through a mix of command BD ring messages and port registers. Howeve...