October 10, 2017 – Morning Cyber Coffee Headlines – “#Cb Connect” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 10, 2017 - Headlines Carbon Black in the News: Carbon Black and IBM...

Intel Puma Denial of Service Vulnerability

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30935)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30934)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30933)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30932)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30931)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30930)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30929)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30928)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30927)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

Netgear ReadyNAS Surveillance Unauthenticated Remote Command Execution

Vulnerability summary The following advisory describes an Unauthenticated Remote Command Execution vulnerability found in Netgear ReadyNAS Surveillance. Netgear ReadyNAS Surveillance – Small businesses and corporate branch offices require a secure way to protect physical assets, but often lack th...

Cisco Small Business 500 Series Stackable Managed Switches Detection (SNMP)

This script performs SNMP based detection of Cisco Small Business 500 Series Stackable Managed Switches. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cisco Small Business SPA300, SPA500 and SPA51x Denial of Service Vulnerabilities

The Cisco Small Business SPA300, SPA500, and SPA51x are all S-series IP phone products from Cisco. A denial of service vulnerability exists in the processing of IP slices in the Cisco Small Business SPA300, SPA500, and SPA51x series of IP phones, which stems from the program's failure to handle...

CVE-2017-6720

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

CVE-2017-6720

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

Race condition

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to the...

CVE-2017-6720

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

CVE-2017-12219

The CVE-2017-12219 vulnerability affects Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones. It stems from the devices’ handling of IP fragments, specifically an inability to reassemble many large fragments in a short time. A remote, unauthenticated attacker can send a crafted strea...

CVE-2017-6720

The CVE-2017-6720 issue affects Cisco Small Business Managed Switches (300, 500, 350, 350X, 550X series and ESW2 line) where the SSH subsystem mishandles SSH messages, allowing an authenticated remote attacker to trigger a reload and cause a DoS. Root cause: improper processing of SSH connections...