174 matches found
PT-2024-3186 · Brocade · Brocade Sannav
Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1 Brocade SANnav version 2.3.0a Description: The issue is related to the disclosure of information through registration files in the Standby Node Support Save component of Brocade SANnav software for...
Encryption key in the console (CVE-2024-29958)
A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. This could provide attackers an additional, less protected path to acquiring the encryption...
Cisco Small Business Security Vulnerabilities
Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in Cisco Small Business that stems from incorrect ACL handling on the stack configuration when the primary or standby switch undergoes a full stack reload or power cycle...
CVE-2023-26258
Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute a...
PT-2023-3347
Name of the Vulnerable Software and Affected Versions: Arcserve UDP versions 7.0 through 9.0.6034 Description: The issue allows authentication bypass, enabling an attacker to obtain a valid session and execute tasks as an administrator. This is achieved by exploiting the getVersionInfo method at...
CVE-2023-21128
In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
ASB-A-272042183
In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
How to control IP address returned in a DNS query based on source IP address (local DNS IP address)
This article contains information about how to control IP address returned in a DNS query based on source IP address local DNS IP address The IP addresses DNS returned must work inactive/standby mode. Also, you can use DNS policy expressions to monitor load balancing service statusassociate to th...
CVE-2023-24509
On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentia...
Vulnerability fixed in Arista switches
Arista has fixed a vulnerability in the firmware of several Series 7000 switches. Switches that are redundantly configured and are equipped with the redundant supervisor module, allow an unauthenticated malicious person to log in as root to the standby supervisor. However, the malicious party mus...
PT-2023-19655 · Arista · Arista Eos
Name of the Vulnerable Software and Affected Versions: Arista EOS affected versions not specified Description: On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged...
CVE-2022-1110
A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker to cause denial of service...
CVE-2022-1110
A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker to cause denial of service...
CVE-2022-1110
A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker to cause denial of service...
Buffer overflow
A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker to cause denial of service...
CVE-2022-1110
CVE-2022-1110 describes a local-buffer overflow in Lenovo Smart Standby Driver prior to version 4.1.50.0. A local attacker could trigger a denial of service via the vulnerable driver component. Affected software: Lenovo Smart Standby Driver (pre-4.1.50.0). Root cause: buffer overflow in the drive...
CVE-2022-1110
A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker to cause denial of service...
Lenovo Smart Standby Driver 安全漏洞
Lenovo Smart Standby Driver is a software from the Chinese company Lenovo that is used to control the hibernation of a computer. A security vulnerability exists in Lenovo Smart Standby Driver prior to version 4.1.50.0, which stems from the presence of a buffer overflow vulnerability. An attacker...
The vulnerability of the Smart Standby Driver software driver for Lenovo laptops allows a hacker to trigger a service failure.
The vulnerability of the Smart Standby Driver software driver for Lenovo laptops relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
