CVE-2017-18268: Observable Discrepancy

Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat ROBOT attack. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish large numbers of crafted SSL connections to the target and obtain the session keys required...

CVE-2017-15533: Observable Discrepancy

Symantec SSL Visibility SSLV 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleichenbacher Oracle Threat ROBOT attack. All affected SSLV versions act as weak oracles according the oracle classification used in the ROBOT research paper. A remo...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

Design/Logic Flaw

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

CVE-2018-8860

The CVE affects Vecna VGo Robot—versions 3.0.3.52164 and 3.0.3.53662 (earlier versions may also be affected). The flaw enables an attacker on an adjacent network to capture firmware updates, exposing sensitive information and potentially enabling further compromise. The NVD/ICSA data record a CVS...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

Command injection

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8866

Vecna VGo Robot is affected by CVE-2018-8866 (OS Command Injection). Affected versions: 3.0.3.52164 and 3.0.3.53662; prior versions may be affected. Vulnerability arises from improper neutralization of special elements used in OS commands (CWE-78). Exploitation vector is adjacent network; impact ...

PT-2018-18671

Name of the Vulnerable Software and Affected Versions Vecna VGo Robot versions prior to 3.0.3.52164 Description An issue exists where an attacker may be able to capture firmware updates through the adjacent network. Recommendations For versions prior to 3.0.3.52164, update to version 3.0.3.52164 ...

PT-2018-18676

Name of the Vulnerable Software and Affected Versions Vecna VGo Robot versions prior to 3.0.3.52164 Description An issue exists where an attacker on an adjacent network could perform command injection. Recommendations For versions prior to 3.0.3.52164, update to version 3.0.3.52164 or later to...

CVE-2018-8866: Improper Neutralization of Special Elements used in an OS Command

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

CVE-2018-8860: Exposure of Sensitive Information to an Unauthorized Actor

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjacent network...

Friday Squid Blogging: US Army Developing 3D-Printable Battlefield Robot Squid

The next major war will be super weird. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Vecna VGo Robot Information Disclosure Vulnerability

VGo is a new productivity improvement solution that allows individuals to replicate themselves in distant locations and move around freely as if they were there. An information disclosure vulnerability exists in versions prior to Vecna VGo Robot 3.0.3.52164, which can be exploited by an attacker ...