19 matches found
EUVD-2023-45878
Malicious code in bioql PyPI...
CVE-2023-41376
Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...
CVE-2023-6728
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...
CVE-2023-6729
Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege authenticated user with "access console" can read or replace the router configuration file as well as other files stored in the Compact...
CVE-2023-6728
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...
CVE-2023-6729 Nokia SR OS: File Access Security Vulnerability
Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege authenticated user with "access console" can read or replace the router configuration file as well as other files stored in the Compact...
CVE-2023-6729
Nokia SR OS routers are vulnerable to an incorrect permission assignment (CWE-732) that grants low-privilege authenticated users with "access console" permissions full read-write access to the entire file system via SFTP or SCP . This allows an attacker to read or replace the router configuration...
CVE-2023-6729 Nokia SR OS: File Access Security Vulnerability
Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege authenticated user with "access console" can read or replace the router configuration file as well as other files stored in the Compact...
CVE-2023-6728 Nokia SR OS: BOF File Encryption Vulnerability
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...
CVE-2023-6728 Nokia SR OS: BOF File Encryption Vulnerability
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...
CVE-2023-6728
The Nokia SR OS is vulnerable to a brute force attack due to inadequate encryption strength in the bof.cfg file. An attacker in possession of the encrypted file can decrypt it to obtain the BOF configuration content , which may lead to sensitive data exposure. This vulnerability affects versions ...
CVE-2023-6729: Incorrect Permission Assignment for Critical Resource
Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege authenticated user with "access console" can read or replace the router configuration file as well as other files stored in the Compact...
PT-2024-15062
Name of the Vulnerable Software and Affected Versions Nokia SR OS routers affected versions not specified Description The issue allows low-privilege authenticated users with "access console" to gain read-write access to the entire file system via SFTP or SCP. This access enables them to read or...
CVE-2023-6728: Inadequate Encryption Strength
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...
CVE-2023-41376
Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...
Design/Logic Flaw
Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...
CVE-2023-41376
Nokia Service Router Operating System SR OS 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes...
CVE-2023-41376
The CVE concerns Nokia SR OS 22.10 and SR Linux. When error-handling update-fault-tolerance is not enabled, these systems mishandle BGP path attributes. This is the explicitly stated issue and affected components are Nokia SR OS 22.10 and SR Linux. The mitigation suggested in available material i...