Shenzhen Libituo Technology LBT-T300-T400 安全漏洞

The Shenzhen Libituo Technology LBT-T300-T400 is an industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-T400 v.3.2, which is caused by a buffer overflow vulnerability that can be exploited by a local attacker to...

PT-2024-24509 · Shenzhen Libituo Technology Co. · Lbt-T300-T400

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 Description: A Buffer Overflow issue allows a local attacker to execute arbitrary code via the vpn client ip variable of the config vpn pptp function in the rc program. This enabl...

Mitsubishi Electric MELSEC iQ-F Series Insufficient Resource Pool (CVE-2023-7033)

Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote attacker to cause a temporary Denial of Service condition for a certain period of time in Ethernet communication of the products by performing TCP SYN...

Azure Private 5G Core Denial of Service Vulnerability

...

Microsoft Windows Remote Access Connection Manager 安全漏洞

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet.If this service is disabled, the VPN client application will If this service is disabled, VPN client applications will not...

Microsoft Windows Remote Access Connection Manager 安全漏洞

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet.If this service is disabled, the VPN client application will If this service is disabled, VPN client applications will not...

OpenVPN 安全漏洞

OpenVPN is a software package from OpenVPN, Inc. that creates encrypted tunnels for virtual private networks VPNs, uses the OpenSSL library to encrypt data and control information, and allows created VPNs to be authenticated using public keys, electronic certificates, or usernames/passwords. A...

The vulnerability of the client web interface of the SINEMA Remote Connect VPN service allows a perpetrator to influence the confidentiality and integrity of the protected information.

The vulnerability of the SINEMA Remote Connect VPN service’s web interface is related to the leakage of information about files and directories. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information...

CVE-2024-28403

TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting XSS via the VPN Page...

OMRON NJ/NX series vulnerable to path traversal

Overview Machine Automation Controller NJ/NX series provided by OMRON Corporation contain a path traversal vulnerability CWE-22, CVE-2024-27121. OMRON Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact An arbitrary file in the affected product...

Vulnerability fixed in Cisco Secure Client

Cisco has fixed a vulnerability in the Secure Client. A malicious party could exploit the vulnerability to use a malicious link to gain access to the SAML token of the victim and thus establish a VPN connection. Access to underlying systems and applications still require authentication. Cisco has...

PT-2024-8940 · Abb · S+ Control Api +3

Name of the Vulnerable Software and Affected Versions: Symphony Plus S+ Operations versions 2.0;0 through 2.0 SP6 TC6 Symphony Plus S+ Operations versions 2.1;0 through 2.1 SP2 RU3 Symphony Plus S+ Operations versions 3.0;0 through 3.3 SP1 RU4 Symphony Plus S+ Engineering versions 2.1 through 2.3...

LinBle LBT T300-T390 Security Vulnerability

LinBle LBT T300-T390 is a 4G Industrial Router from LinBle China. A security vulnerability exists in the LinBle LBT T300-T390 v2.2.1.8, which is caused by a buffer overflow in the vpnclientip parameter of the configvpnpptp method...

Veeam Backup for AWS Private Network Deployment Automation

Purpose This article provides information about Veeam Backup for AWS support for private deployment mode. It will explain how to use the attached script to configure network settings for buckets used as repositories and workers used for backups. To learn more about implementing Private Deployment...

CVE-2023-6764

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...

CVE-2023-6399

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

Zyxel ATP Formatting String Error Vulnerability

Zyxel ATP is a firewall from China-based Zyxel. A formatting string error vulnerability exists in Zyxel ATP firmware versions 4.32 through 5.37 Patch 1, which originates from allowing authenticated IPSec VPN users to cause a denial of service to the deviceid daemon by sending a crafted hostname t...

CISA and MS-ISAC Release Advisory on Compromised Account Used to Access State Government Organization

Today, CISA and the Multi-State Information Sharing & Analysis Center MS-ISAC released a joint Cybersecurity Advisory CSA, Threat Actor Leverages Compromised Account of Former Employee to Access State Government Organization to provide network defenders with the tactics, techniques, and procedure...

The vulnerability of the VPN function in Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance allows a perpetrator to establish an SSL VPN session with an unauthorized user without the client’s knowledge.

The vulnerability of the VPN function in Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance software relates to bypassing authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to establish an SSL VPN session wit...

PT-2024-1667 · Tp Link · Tp-Link Er7206 Omada Gigabit Vpn Router

Name of the Vulnerable Software and Affected Versions: Tp-Link ER7206 Omada Gigabit VPN Router version 1.3.0 build 20230322 Rel.70591 Description: A post authentication command injection issue exists when setting up the PPTP global configuration. This can be triggered by a specially crafted HTTP...