6612 matches found
CVE-2017-5257
Cambium Networks ePMP firmware versions 3.5 and earlier are affected by CVE-2017-5257. The issue stems from failure to filter user-submitted input in certain SNMP OIDs, allowing an attacker who knows or guesses the SNMP read/write (RW) community string to inject XSS strings that execute in the co...
CVE-2017-5257
In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or guesses the SNMP read/write RW community string can insert XSS strings in certain SNMP OIDs which will execute in the context of the currently-logged on user...
CVE-2017-5258
CVE-2017-5258 affects Cambium Networks ePMP firmware 3.5 and earlier. The attacker, knowing or guessing the RW community string, can deliver a configuration file URL via SNMP containing XSS strings; the device will restore the attacker’s config via HTTP, inserting XSS. Some connected records desc...
CVE-2017-5258
In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for a configuration file over SNMP with XSS strings in certain SNMP OIDs, serve it via HTTP, and the affected device will perform a configuration restore using...
Cambium cnPilot r200/r201 SNMP Enumeration
Cambium cnPilot r200/r201 devices can be administered using SNMP. The device configuration contains IP addresses, keys, passwords, & lots of juicy information. This module exploits an access control flaw, which allows remotely extracting sensitive information such as account passwords, WiFI PSK, ...
Cambium ePMP 1000 SNMP Enumeration
Cambium devices ePMP, PMP, Force, & others can be administered using SNMP. The device configuration contains IP addresses, keys, and passwords, amongst other information. This module uses SNMP to extract Cambium ePMP device configuration. On certain software versions, specific device configuratio...
NetGain Systems Enterprise Manager snmpwalk.snmpwalk_005fdo_jsp ip Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
Hirschmann Devices Detection (SNMP)
This script performs SNMP based detection of Hirschmann Devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Hirschmann Device Detection Consolidation
Consolidation of Hirschmann device detections. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Lantronix Devices Detection Consolidation
Consolidation of Lantronix device detections. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...
Lantronix Devices Detection (SNMP)
SNMP based detection of Lantronix Devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.108301...
Cambium Multiple Vulnerabilities
Vulnerabilities Summary The following advisory describes three 3 vulnerabilities found in Cambium Network Updater Tool and Networks Services Server. The Network Updater Tool is “a free-of-charge tool that applies packages to upgrade the device types that the release notes for the release that you...
OPENVAS SCAN / Greenbone Enterprise Appliance (GEA) / Greenbone Security Manager (GSM) / Greenbone OS (GOS) Detection (SNMP)
SNMP based detection of OPENVAS SCAN / Greenbone Enterprise Appliance GEA / Greenbone Security Manager GSM / Greenbone OS GOS. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Geneko Router Detection (SNMP)
SNMP based detection of Geneko routers. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.107261";...
collectd SNMP Plugin Denial of Service Vulnerability
collectd is a set of open source running on Linux, Unix system under the system information collection tools. SNMP plugin is one of the simple network management plugin . A denial of service vulnerability exists in the 'csnmpreadtable' function of the snmp.c file of the SNMP plugin in versions of...
CVE-2017-16820
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
CVE-2017-16820
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
DEBIAN-CVE-2017-16820
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...
Double free
The csnmpreadtable function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash or potentially have other impact...