PT-2022-2289

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV340, RV340W, RV345, RV345P versions affected versions not specified Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description The issue exists due to insufficient inpu...

PT-2022-2293

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description The issue allows an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and...

PT-2022-2296

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV340, RV340W, RV345, RV345P versions affected versions not specified Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers versions affected versions not specified Description The issue is related to the lack...

PT-2022-2307

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description The issue is related to multiple vulnerabilities in the Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. These...

PT-2022-2302

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV Series Routers versions RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, RV345P Description The issue is related to a stack-based buffer overflow vulnerability and insufficient authorization in the web...

PT-2022-2308

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV Series Routers versions RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, RV345P Description The issue concerns a vulnerability related to improper certificate validation in the firmware update process of the...

PT-2022-2291

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV Series Routers versions RV160, RV260, RV340, and RV345 Description The issue is caused by a stack-based buffer overflow in the SSL VPN module of the Cisco Small Business RV340, RV340W, RV345, and RV345P routers. This ca...

PT-2022-2292

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV340, RV340W, RV345, RV345P versions affected versions not specified Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description The issue is related to insufficient...

PT-2022-2290

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description The issue allows an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and...

PT-2022-2297

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV Series Routers versions prior to the fixed version Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description The issue allows an attacker to execute arbitrary code,...

Cisco Small Business RV Series Authentication Bypass / Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Small Business RV Series Authentication Bypass and Command Injection', 'Description' = %q This module exploits an authentication bypass...

Cisco Small Business RV Series Authentication Bypass / Command Injection Exploit

This Metasploit module exploits an authentication bypass CVE-2021-1472 and command injection CVE-2021-1473 in the Cisco Small Business RV series of VPN/routers. The device does not adequately verify the credentials in the HTTP Authorization field when requests are made to the /upload endpoint. Th...

Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

Intel products contain a vulnerability which can allow attackers to perform privilege escalation...

Cesanta MJS 安全漏洞

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...

CVE-2021-43269

In Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to use a malicious proxy auto-config PAC file, leading to arbitrary code execution. This affects Incydr Basic, Advanced, and Gov F1; CrashPlan Cloud; and CrashPlan for Small Business. Incydr...

CVE-2021-43269

In Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to use a malicious proxy auto-config PAC file, leading to arbitrary code execution. This affects Incydr Basic, Advanced, and Gov F1; CrashPlan Cloud; and CrashPlan for Small Business. Incydr...

CVE-2021-43269: Improper Control of Generation of Code

In Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to use a malicious proxy auto-config PAC file, leading to arbitrary code execution. This affects Incydr Basic, Advanced, and Gov F1; CrashPlan Cloud; and CrashPlan for Small Business. Incydr...

PT-2022-11809

Name of the Vulnerable Software and Affected Versions Code42 app versions prior to 8.8.0 Incydr Basic versions prior to 8.8.0 Incydr Advanced versions prior to 8.8.0 Incydr Gov F1 versions prior to 8.8.0 CrashPlan Cloud versions prior to 8.8.0 CrashPlan for Small Business versions prior to 8.8.0...

Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting

Overview Multiple Canon laser printers and small office multifunctional printers contain a stored cross-site scripting vulnerability CWE-79. Murashima Masahiro of IERAE SECURITY INC. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

CVE-2021-40327

Trusted Firmware-M TF-M 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key held by the Crypto service based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner...