Security Advisory - Buffer Overflow Vulnerability on Several Mobile Broadband Products

There is a buffer overflow vulnerability on several mobile broadband products. The software does not sufficiently validate the length of certain fields in DHCP message which is received. Successful exploit could cause the device to reboot. Vulnerability ID: HWPSIRT-2017-09083 This vulnerability h...

Siemens SIMATIC RTLS Locating Manager Elevation of Privilege Vulnerability (CNVD-2020-51250)

SIMATIC RTLS is a real-time wireless positioning system for locating solutions.Siemens SIMATIC RTLS Locating Manager is used for the configuration, operation and maintenance of SIMATIC RTLS installations. An elevation of privilege vulnerability exists in Siemens SIMATIC RTLS Locating Manager. An...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:1379-1 Rating: important References: 1058115 1112178 1136666 1171558 1173060 1175691 1176069 Cross-References: CVE-2020-14386 Affected Products: openSUSE Leap 15.1 An update that solves one...

Mofi Network MOFI4500-4GXeLTE Remote Reboot Backdoor Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A remote reboot backdoor vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices, which can be exploited by an attacker to reboot the device by accessing /cgi-bin/poof.cgi with a private key...

Mofi Network MOFI4500-4GXeLTE Unauthorized Remote Reboot

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices, which can be exploited by an attacker to access /cgi-bin/poof.cgi to remotely reboot the device...

The vulnerability in the implementation of the Cisco Discovery protocol of the IP camera software from Cisco Video Surveillance series 8000 allows a intruder to execute arbitrary code or trigger a reboot of the vulnerable IP camera.

The vulnerability of the Cisco Discovery protocol implemented in Cisco Video Surveillance IP cameras of the 8000 series exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a restart of the vulnerable IP...

The vulnerability in the implementation of the Cisco Discovery protocol of the IP camera software from Cisco Video Surveillance series 8000 allows a intruder to execute arbitrary code or trigger a reboot of the vulnerable IP camera.

The vulnerability of the Cisco Discovery protocol implemented in Cisco Video Surveillance IP cameras of the 8000 series exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a restart of the vulnerable IP...

CVE-2020-2075

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH...

CVE-2020-2075

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH...

CVE-2020-2075

CVE-2020-2075 concerns the Platform mechanism AutoIP used in SICK devices (e.g., Bulkscan LMS111/LMS511, CLV62x–CLV65x, ICR890-3, LMS10x/LMS11x/LMS15x/LMS12x/LMS13x/LMS14x/LMS5xx/LMS53x, MSC800, RFH). The vulnerability allows remote attackers to reboot the device by sending a crafted network pack...

Cisco NX-OS Remote Code Execution Vulnerability

Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A remote code execution vulnerability exists in the Data Management Engine DME of Cisco NX-OS. The vulnerability stems from insufficient...

CVE-2020-17376

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

Design/Logic Flaw

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

UBUNTU-CVE-2020-17376

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

PYSEC-2020-243

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

PYSEC-2020-243

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

CVE-2020-17376

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

CVE-2020-17376

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

CVE-2020-17376

CVE-2020-17376 : In OpenStack Nova, a vulnerability in Guest.migrate (virt/libvirt/guest.py) allows a user to access destination-host devices that share paths with source-host devices after performing a soft reboot of an instance that has previously undergone live migration. Affected are OpenStac...

CVE-2020-3507

Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP camera. These vulnerabilities are due to missing checks when t...