The vulnerability of the messaging service in the centralized network management system of Cisco Catalyst SD-WAN Manager allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the Cisco Catalyst SD-WAN Manager, a centralized messaging service, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information or cause service failures by sending specially...

The vulnerability of the Cisco Small Business RV110W, RV130, RV130W, and RV215W router microprogramming system’s IPSec VPN server allows a hacker to gain access to the IPSec VPN network.

The vulnerability of the Cisco Small Business RV110W, RV130, RV130W, and RV215W router microprogramming system’s IPSec VPN server is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability can allow an attacker to gain access to the IPSec VPN network...

CVE-2022-20923

A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to bypass authentication controls and access the IPSec VPN network. This vulnerability is due to the improper...

Cisco SD-WAN vManage Software 安全漏洞

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Networking solutions from Cisco. A security vulnerability exists in Cisco SD-WAN vManage Software versions prior to 20.6.4, prior to 20.9.1, which stems from a vulnerability in the binding configuration...

Cross site request forgery (csrf)

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for...

CVE-2022-2267 MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF

The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users such as subscriber to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan priva...

CVE-2022-38368

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands...

CVE-2022-20336

In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of applications allow-listed to use the network during VPN lockdown mode with no additional execution privileges needed. User interaction is not...

CVE-2022-20336

In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of applications allow-listed to use the network during VPN lockdown mode with no additional execution privileges needed. User interaction is not...

Cisco Adaptive Security Appliances Software 跨站脚本漏洞

Cisco ASA is a family of firewalls for enterprise security applications from Cisco. A cross-site scripting vulnerability exists in the Cisco Adaptive Security Appliance ASA Software that stems from incorrect validation of input passed to a clientless SSL VPN component...

PT-2022-4099 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to improper validation of input that is passed to the...

Microsoft Windows Point-to-Point Tunneling Protocol 安全漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A security vulnerability...

Trend Micro VPN Proxy Pro 安全漏洞

Trend Micro VPN Proxy Pro is one of the best virtual private network services from Trend Micro. A security vulnerability exists in Trend Micro VPN Proxy Pro version 5.2.1026 and prior versions. A local attacker could exploit the vulnerability to gain elevation of privilege on affected systems...

Zyxel USG FLEX 路径遍历漏洞

Zyxel USG FLEX is a firewall from China-based Hopkins Technology Zyxel. Offering flexible VPN options IPsec, SSL or L2TP, it provides flexible and secure remote access for remote work and management. A security vulnerability exists in Zyxel products that stems from a directory traversal...

多款Siemens产品缓冲区错误漏洞

The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other protocols with data encryption.The SIMATIC CP 1243-8 I...

多款Siemens SIMATIC产品命令注入漏洞

The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other protocols with data encryption.The SIMATIC CP 1243-8 I...

Siemens多款产品 代码注入漏洞

The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other protocols with data encryption.The SIMATIC CP 1243-8 I...

Sparklabs Viscosity 代码问题漏洞

Sparklabs Viscosity is an OpenVPN client from Sparklabs Australia. A security vulnerability exists in Sparklabs Viscosity version 1.6.7 that stems from a path not being properly validated...

Private Network 5G Security Risks & Vulnerabilities

Why cybersecurity is the first step to private network deployment...

Siemens SINEMA Remote Connect Server 访问控制错误漏洞

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.An authentication error vulnerability exists in Siemens SINEMA Remote Connect Server, which could be...