PT-2023-13342 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient DOS due to a reachable assertion in the Modem during OSI decode scheduling. Recommendations: At the moment, there is no information about a newer version...

SUSE CVE-2003-0429

The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow...

Security Bulletin: Vulnerabilities in OpenSSL affect Data ONTAP SMI-S Agent，OnCommand Workflow Automation ，OnCommand Unified Manager Core Package (5.x)，Open Systems SnapVault Agent (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568)

Summary OpenSSL vulnerabilities were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by Data ONTAP SMI-S Agent，OnCommand Workflow Automation ，OnCommand Unified Manager Core Package 5.x，Open Systems SnapVault Agent. These products have addressed the applicable CVEs...

How Open Systems uses Microsoft tools to improve security maturity

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. We’ve all seen it happen—an organization has all the top-notch security tools in place and still, they get breached. In today’s rapidly evolving threat landscape, complexity leads to...

How Open Systems uses Microsoft tools to improve security maturity

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. We’ve all seen it happen—an organization has all the top-notch security tools in place and still, they get breached. In today’s rapidly evolving threat landscape, complexity leads to...

OSAS Traverse Extension 11 Unquoted Service Path

Exploit Title: OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path Exploit Auth: Tech Johnny Vendor Homepage: https://www.osas.com Version: 11 x86 Tested on: Windows 2012R2 Details: C:\Windows\system32wmic service get name, pathname, displayname, startmode | findstr /i "Auto...

Understanding VPN through open systems interconnection model

By David Balaban VPN is a wonderful thing that you all have probably heard about. I assume it was something like this: “Using a VPN you can visit websites blocked by state services and engage in any network activity without fear of revealing your actual IP address.” If you thought that Virtual...

Denial of Service Vulnerability in the OSI Layer of the SISCO_MMS_Lite Suite MMS Protocol

MMSLite is a communication component development library based on the IEC61850 standard for substation network communication developed by SISCO, mainly used for Intelligent Electronic Devices IEDs such as Remote Terminal Units RTUs, Automatic Relays, Programmable Logic Controllers PLCs and so on....

The vulnerability of the Open Systems Gateway initiative software interface allows a perpetrator to connect to the interface and gain access to arbitrary files. This vulnerability is associated with the Cisco Policy Suite software.

The vulnerability of the OSGi interface in the Cisco Policy Suite software management environment is related to the absence of a mechanism for authenticating the OSGi interface. Exploiting this vulnerability allows an attacker to connect to the interface remotely and gain access to any files...

Moderate: Red Hat Security Advisory: squid security update

Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...