CVE-2020-9241: Undefined Security Weakness

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1H563SP1C00,10.0.3.1H563SP21C233 have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device...

Unspecified vulnerability in the Grandstream HT800 series

The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. An input validation error vulnerability exists in the Grandstream HT800 series using firmware version 1.0.17.5 and earlier. The vulnerability stems from a failure of the system to properly validate incoming dat...

CVE-2020-15043

iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses...

Cross site request forgery (csrf)

iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses...

CVE-2020-15043

iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses...

CVE-2020-15043

CVE-2020-15043 affects iBall WRB303N devices (Best IT World India) through a CSRF vulnerability in the web interface. The issue allows unauthorized actions (context: enabling remote management, enabling DHCP, or altering the IP subnet range) due to insufficient request validation. Public details ...

CVE-2020-15043

iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses...

CVE-2020-15043: Cross-Site Request Forgery (CSRF)

iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses...

PT-2020-14141

Name of the Vulnerable Software and Affected Versions iBall WRB303N devices affected versions not specified Description The issue allows CSRF attacks, which can be demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses. Recommendations At the...

CVE-2020-0540

Insufficiently protected credentials in IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access...

The science behind Microsoft Threat Protection: Attack modeling for finding and stopping evasive ransomware

The linchpin of successful cyberattacks, exemplified by nation state-level attacks and human-operated ransomware, is their ability to find the path of least resistance and progressively move across a compromised network. Determining the full scope and impact of these attacks is one the most...

The vulnerability of Microprogrammed Network Interface Systems in Cisco Firepower Threat Defense, related to access control deficiencies, allows attackers to compromise the integrity of protected information.

The vulnerability of Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to lack of access control. Exploiting this vulnerability allows a malicious actor to influence the integrity of protected information by using a specially created remote management traff...

The vulnerability of Microprogrammed Network Interface Cards from Cisco Firepower Threat Defense, related to resource management errors, allows attackers to trigger a service failure.

The vulnerability of Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by creating a large number of remote management connections on the...

Cisco Firepower Threat Defense Software Management Interface DoS (cisco-sa-ftd-mgmt-interface-dos-FkG4MuTU)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a denial of service DoS vulnerability in the management interface due to how FTD handles session timeouts for management connections. An unauthenticated, remote attacker can exploit this issue, by sendi...

CVE-2020-3280

A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affecte...

Deserialization of untrusted data

A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affecte...

CVE-2020-3280: Improper Input Validation

A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affecte...

CVE-2020-3280 Cisco Unified CCX Preauth RCE

A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affecte...

HPE Superdome Flex Server Input Validation Error Vulnerability

HPE Superdome Flex Server is a modular server product from Hewlett Packard Enterprise HPE. A security vulnerability exists in the RMC component in versions prior to HPE Superdome Flex Server 3.25.46 2020-5-12. An attacker could exploit the vulnerability to elevate privileges...

PT-2020-2669

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express Unified CCX affected versions not specified Description A vulnerability in the Java Remote Management Interface could allow an unauthenticated, remote attacker to execute arbitrary code on an affected devic...