PT-2022-35765 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue is related to a dangling pnp string in the f printer.c file of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

Cisco Small Business RV Series Routers Multiple Vulnerabilities (cisco-sa-sb-mult-vuln-CbVp4SUR)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by multiple vulnerabilities: - A vulnerability in the web filter database update feature of Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote...

pnp-sensors.eu Improper Access Control vulnerability OBB-2262053

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-1442

A vulnerability in a diagnostic command for the Plug-and-Play PnP subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user level 15 on an affected device. The vulnerability is due to insufficient protection of...

Security feature bypass

A vulnerability in a diagnostic command for the Plug-and-Play PnP subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user level 15 on an affected device. The vulnerability is due to insufficient protection of...

CVE-2021-1442

CVE-2021-1442 describes a privilege-escalation in Cisco IOS XE’s Plug-and-Play (PnP) subsystem. An authenticated, local attacker can exploit the diagnostic CLI (show pnp profile) on a device with a specific PnP listener enabled to obtain a privileged authentication token and execute privileged co...

Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability

A vulnerability in a diagnostic command for the Plug-and-Play PnP subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user level 15 on an affected device. The vulnerability is due to insufficient protection of...

CVE-2019-1748 Cisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation Vulnerability

A vulnerability in the Cisco Network Plug-and-Play PnP agent of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability exists because the affected software insufficiently validates certificates...

CVE-2019-1748

CVE-2019-1748 affects Cisco IOS Software and Cisco IOS XE Software with the Network Plug-and-Play (PnP) agent. The root cause is insufficient certificate validation, allowing an unauthenticated, remote attacker to present a crafted certificate and perform man-in-the-middle attacks to decrypt/modi...

The vulnerability of the pnp-save.sh service on the TeNIX programmable logic controllers MFC1500 and MFC3000 allows a hacker to read data stored by other users on the device.

The vulnerability of the pnp-save.sh service in the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to remotely read data stored by other users on the devic...

The vulnerability of the pnp-receive.sh service in the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 allows a hacker to write arbitrary data onto the device and exhaust the available disk space.

The vulnerability of the pnp-receive.sh service on the TeNIX programmable logic controllers MFC1500 and MFC3000 operating system is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to exhaust the device’s disk space by sending arbitrary...

Microsoft Windows: Audit PNP Activity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpnpactivity.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit PNP Activity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

CVE-2017-3873

A vulnerability in the Plug-and-Play PnP subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point AP or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is...

Input validation

A vulnerability in the Plug-and-Play PnP subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point AP or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is...

CVE-2017-3873

CVE-2017-3873 affects Cisco Aironet 1800/2800/3800 Series APs running Lightweight AP or Mobility Express. The PnP subsystem fails to validate PnP server responses, allowing an adjacent unauthenticated attacker to execute arbitrary code with root privileges by sending malicious PnP responses. Affe...

CVE-2017-3873

A vulnerability in the Plug-and-Play PnP subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point AP or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is...

Cisco Aironet 1800, 2800, and 3800 Series Access Points Plug-and-Play Arbitrary Code Execution Vulnerability

A vulnerability in the Plug-and-Play PnP subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point AP or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is...

PNP ePaper - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PNP ePaper published at the 'play' market has multiple vulnerabilities...

Fedora Update for pnp4nagios FEDORA-2012-13244

Check for the Version of pnp4nagios OpenVAS Vulnerability Test Fedora Update for pnp4nagios FEDORA-2012-13244 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Microsoft Windows Prtition Manager Privilege Elevation Vulnerability (2690533)

This host is missing an important security update according to Microsoft Bulletin MS12-033. OpenVAS Vulnerability Test $Id: secpodms12-033.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Prtition Manager Privilege Elevation Vulnerability 2690533 Authors: Rachana Shetty Copyright: Copyright...