17 matches found
EUVD-2023-45878
Malicious code in bioql PyPI...
CVE-2023-41376
Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...
CVE-2023-6728
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...
CVE-2023-6729
Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege authenticated user with "access console" can read or replace the router configuration file as well as other files stored in the Compact...
CVE-2023-6728
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...
CVE-2023-6729
The CVE-2023-6729 entry concerns Nokia SR OS routers where a low-privilege user with the "access console" can read or replace the router’s configuration and other files on the CF/SD card via SFTP/SCP, bypassing CLI commands. Affected component: SR OS file system access via remote file transfer fo...
CVE-2023-6729 Nokia SR OS: File Access Security Vulnerability
Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege authenticated user with "access console" can read or replace the router configuration file as well as other files stored in the Compact...
CVE-2023-6729 Nokia SR OS: File Access Security Vulnerability
Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege authenticated user with "access console" can read or replace the router configuration file as well as other files stored in the Compact...
CVE-2023-6728
CVE-2023-6728 affects Nokia SR OS where the bof.cfg file encryption is vulnerable to brute-force access. In affected SR OS, an attacker who obtains the encrypted bof.cfg can decrypt it to retrieve BOF configuration content. Public descriptions across Red Hat, NVD, CVE listings, CVE records, and C...
CVE-2023-6728 Nokia SR OS: BOF File Encryption Vulnerability
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...
CVE-2023-6728 Nokia SR OS: BOF File Encryption Vulnerability
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...
PT-2024-15062
Name of the Vulnerable Software and Affected Versions Nokia SR OS routers affected versions not specified Description The issue allows low-privilege authenticated users with "access console" to gain read-write access to the entire file system via SFTP or SCP. This access enables them to read or...
CVE-2023-41376
Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...
Design/Logic Flaw
Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...
CVE-2023-41376
Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...
CVE-2023-41376
The CVE concerns Nokia SR OS 22.10 and SR Linux. When error-handling update-fault-tolerance is not enabled, these systems mishandle BGP path attributes. This is the explicitly stated issue and affected components are Nokia SR OS 22.10 and SR Linux. The mitigation suggested in available material i...
CVE-2023-41376
Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...