CVE-2017-12278

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is due to a memory leak that occurs on...

November 2, 2017—KB4049370 (OS Build 15063.675)

None None...

Cisco Wireless LAN Controller CAPWAP Discovery Request Denial of Service Vulnerability

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly, resulting in a denial of service DoS...

Testing HA Failover on NetScaler SD-WAN

Site level HA works in a way independent to the virtual path state of the site with other sites. Meaning if the physical links are down while one appliance is serving as active, then it will be the same case for the standby as well as the same physical link will be used by standby too and hence...

Code injection

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TC...

CVE-2017-0303

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up,...

Design/Logic Flaw

In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel TMM to restart and temporarily fail to process traffic. This issue is exposed on virtual servers...

CVE-2017-6160

In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel TMM to restart and temporarily fail to process traffic. This issue is exposed on virtual servers...

CVE-2017-6159

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TC...

CVE-2017-6160

CVE-2017-6160 affects F5 BIG-IP TMM: remote attacker can craft HTTP requests to force Traffic Management Microkernel (TMM) to restart, causing temporary traffic disruption. According to the advisory, vulnerable configurations include BIG-IP AAM (versions 12.0.0–12.1.1, 11.6.0–11.6.1, 11.4.1–11.5....

CVE-2017-6160

In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel TMM to restart and temporarily fail to process traffic. This issue is exposed on virtual servers...

CVE-2017-6159: Undefined Security Weakness

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TC...

Cisco IOS PN-DCP DoS

The vulnerability of the PROFINET Discovery and Configuration Protocol PN-DCP implementation in the Cisco IOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device restart and a Denial-of-Service attac...

Cisco IOS CIP DoS

The vulnerabilities of the Cisco IOS operating system’s implementation of the Common Industrial Protocol CIP exist due to insufficient validation of input data during the processing of CIP packets. Exploiting these vulnerabilities can allow a malicious actor to trigger a device restart and a...

Cisco IOS CIP DoS

The vulnerabilities of the Cisco IOS operating system’s implementation of the Common Industrial Protocol CIP exist due to insufficient validation of input data during the processing of CIP packets. Exploiting these vulnerabilities can allow a malicious actor to trigger a device restart and a...

Security Advisory - DoS Vulnerability in Huawei Firewall Products

There is a DoS vulnerability in some Huawei firewall products. Due to insufficient input validation, a remote attacker who controls the peer device could exploit the vulnerability by sending malformed IKE packets to the target device. Successful exploit of the vulnerability could cause the device...

CVE-2017-3883

A vulnerability in the authentication, authorization, and accounting AAA implementation of Cisco Firepower Extensible Operating System FXOS and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability occurs because AAA process...

2017-10 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4049179)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-10 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x86-based Systems (KB4049179)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2017-10 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4049179)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...