5600 matches found
CVE-2022-32985
libnxapl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201...
SonicWALL Switch 命令注入漏洞
SonicWALL Switch is a switch from SonicWALL, Inc. An input validation error vulnerability exists in SonicWALL Switch versions prior to 1.2.0.0-3, which stems from insufficient validation of user-supplied input and can be exploited by a remote attacker to execute arbitrary code on the device...
SonicWall Switch Post-Authenticated Remote Code Execution
A vulnerability in SonicWall Switch 1.1.1.0-2s and earlier allows an authenticated malicious user to perform remote code execution in the host system. CVE: CVE-2022-2323 Last updated: July 15, 2022, 4:11 p.m...
Siemens SCALANCE X Switches Buffer Overflow Vulnerability (CNVD-2022-51438)
Siemens SCALANCE X Switches, an industrial Ethernet switch product from Siemens, Germany, is vulnerable to a buffer overflow vulnerability that could be exploited by an unauthenticated attacker to crash the affected device...
Siemens SCALANCE X Switches has an unspecified vulnerability
A security vulnerability exists in Siemens SCALANCE X Switches, an industrial Ethernet switch product from Siemens, Germany, which could be exploited by a remote, unauthenticated attacker to brute-force session IDs and hijack existing sessions...
The vulnerability of the Ethernet switch Bosch PRA-ES8P2S web server allows attackers to increase their privileges.
The vulnerability of the Bosch PRA-ES8P2S Ethernet switch web server is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to escalate their privileges remotely...
The vulnerability of the DA50N network switch’s web interface allows a intruder to gain unauthorized access to protected information.
The vulnerability of the DA50N network switch web interface is related to insufficient protection of registration data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...
The vulnerability of the DA50N network switch web interface allows a hacker to gain full access to the device.
The vulnerability of the DA50N network switch web interface is related to weak password requirements. Exploiting this vulnerability can allow a remote attacker to gain full access to the device...
The vulnerability of the DA50N network switch web interface allows a hacker to execute arbitrary code.
The vulnerability of the DA50N network switch web interface is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by loading a specially crafted image...
The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S, related to deficiencies in access control, allows attackers to bypass existing security restrictions and elevate their privileges to the root level.
The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and elevate their privileges to the root level...
Siemens SCALANCE 安全特征问题特征问题漏洞
A security vulnerability exists in Siemens SCALANCE X Switches, an industrial Ethernet switch product from Siemens, Germany, which could be exploited by a remote, unauthenticated attacker to brute-force session IDs and hijack existing sessions...
Siemens SCALANCE X Switch Devices
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
The vulnerability in the web interface for diagnosing micro-program software in the Bosch PRA-ES8P2S Ethernet switch allows a hacker to execute arbitrary operating system commands.
The vulnerability of the web-based interface for diagnosing micro-programmed Ethernet switch software from Bosch, the PRA-ES8P2S, is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands using...
CVE-2022-28624
A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products. The vulnerability could be remotely exploited to allow cross site scripting XSS. HPE has made the following software updates to resolve the vulnerability. HPE FlexNetwork...
Citrix ADC MPX/SDX Fortville NIC Err-Disabled when LLDP Is enabled on Peer Switch/Router
If Citrix ADC is connected to a switch/router via Fortville NIC For example 10G port on MPX 8900, interface will show UP for a moment then go to Err-Disabled state. Running "show interface" command on ADC, you can find ADC Fortville NIC is in Err-Disabled State, along with TX Stall andHang counts...
The vulnerability of Zyxel GS1200 series switch microprogramming software, related to information disclosure due to inconsistencies, allows attackers to gain unauthorized access to protected information.
The vulnerability of Zyxel GS1200 series switch microprogramming software is related to the disclosure of information through incompatibility. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
GSD-2022-1002579 net/mlx5: E-Switch, pair only capable devices
net/mlx5: E-Switch, pair only capable devices This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...
CVE-2022-31076 Malicious Message can crash CloudCore in KubeEdge
KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message can crash CloudCore by triggering a nil-pointer dereference in the UDS Server. Since the UDS Server only communicates...
CVE-2022-31076 Malicious Message can crash CloudCore in KubeEdge
KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected versions a malicious message can crash CloudCore by triggering a nil-pointer dereference in the UDS Server. Since the UDS Server only communicates...
