CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8323

The CVE-2020-8323 issue affects Lenovo systems (ThinkPad/ThinkStation/Lenovo Notebook) via a vulnerability in the SMI callback function used by the Legacy SD driver. The underlying flaw could allow arbitrary code execution on affected devices. Public details identify the vulnerable component as t...

Siemens LOGO! TDE service "NFSAccess" Delete Denial of Service Vulnerability

Summary An exploitable denial of service vulnerability exists in the TDE service functionality of Siemens LOGO! 1.82.02, 12/24RCE Version 0BA and 230RCE Version 0BA. A specially crafted network request can cause be used to delete critical system data resulting in a denial of service. An attacker...

Siemens LOGO! TDE service "NFSAccess" Upload File Write Vulnerability

Summary An exploitable file write vulnerability exists in the TDE service functionality of Siemens LOGO! 1.82.02, 12/24RCE Version 0BA and 230RCE Version 0BA. A specially crafted network request can upload or overwrite file content to the local SD card. An attacker can send a sequence of maliciou...

Cisc IOS XE SD-WAN Software License Issue Vulnerability

Cisco IOS and IOS XE are both products of Cisco. the CLI is one of the command-line interfaces. the SD-WAN Software is one of the software-defined WAN software packages. An authorization issue vulnerability exists in Cisco IOS XE SD-WAN Software versions 16.9.1 through 16.10.1, which stems from a...

CVE-2020-3216

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for...

CVE-2020-3216

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for...

Authentication flaw

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for...

CVE-2020-3216 Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for...

CVE-2020-3216 Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for...

CVE-2020-3216

CVE-2020-3216 affects Cisco IOS XE SD-WAN Software. Affected component: SD-WAN software with insufficient authentication for certain commands. Root cause: authentication bypass allowing an unauthenticated, physical attacker to stop boot initialization and gain unrestricted root-shell access. Impa...

Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for...

NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN 5100 Standard Edition and 800 WANOP Edition

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN 5100 Standard Edition and 800 WANOP Edition platforms. The tables below explain the Citrix SD-WAN life cycle management milestones as well as important information regarding dates and options during this period. The...

UBUNTU-CVE-2020-13253

sdwpaddr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhciwrite operations. A guest OS user can crash the QEMU process...

How to troubleshoot a SD-WAN Remote licensing issue?

This article was created to know how to troubleshoot the connection between a SD-WAN appliance and a remote licensing server...

Palo Alto Networks PAN-OS 7.1.x < 8.1.14 / 8.0.x < 8.1.14 / 8.1.x < 8.1.14 / 9.0.x < 9.0.7 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.14 or 8.0.x prior to 8.1.14 or 8.1.x prior to 8.1.14 or 9.0.x prior to 9.0.7. It is, therefore, affected by a vulnerability. - An external control of filename vulnerability in the SD WAN component of Palo Al...

CVE-2020-13253

An out-of-bounds read-access flaw was found in the SD Memory Card emulator of the QEMU. This flaw occurs while performing block write commands via sdhciwrite, if a guest user has sent an 'address' which is out-of-bounds of 's-wpgroups'. A guest user or process may use this flaw to crash the QEMU...

Critical Vulnerability in Citrix Application Delivery Controller, Gateway, and SD-WAN WANOP

Summary Note: As of January 24, 2020, Citrix has released all expected updates in response to CVE-2019-19781.1 On January 19, 2020, Citrix released firmware updates for Citrix Application Delivery Controller ADC and Citrix Gateway versions 11.1 and 12.0. On January 22, 2020, Citrix released...

SQL Injection Vulnerability in SDCMS 4-in-1 Enterprise Website Management System (CNVD-2020-33106)

Four-in-one enterprise website management system is a computer website + mobile website + WeChat public number + small program in one of the content management system. There is a SQL injection vulnerability in SDCMS, which can be exploited by attackers to obtain sensitive information from the...

Palo Alto Networks PAN-OS SD WAN Component Arbitrary Code Execution Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A security vulnerability exists in the SD WAN component of Palo Alto Networks PAN-OS. An attacker could exploit the vulnerability to execute arbitrary code with root privileges...