CVE-2021-20024

The CVE-2021-20024 issue affects SonicWall Switch devices and is caused by a vulnerability in LLDP protocol handling that leads to an out-of-bounds read in memory. This can result in system instability and potential exposure of memory contents. Public disclosures and related advisories confirm th...

CVE-2021-20024

Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability or potentially read sensitive information from the memory locations...

SonicWall Switch LLDP Protocol multiple Out-of-Bound read vulnerability

Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability or potentially read sensitive information from the memory locations. CVE: CVE-2021-20024 Last updated: July 8, 2021, 5:07 p.m...

GSD-2021-1001145 s390/stack: fix possible register corruption with stack switch helper

s390/stack: fix possible register corruption with stack switch helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13 by commit...

GSD-2021-1001136 s390/stack: fix possible register corruption with stack switch helper

s390/stack: fix possible register corruption with stack switch helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.14 by commit...

UVI-2021-1001128 s390/stack: fix possible register corruption with stack switch helper

s390/stack: fix possible register corruption with stack switch helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.47 by commit...

GSD-2021-1001128 s390/stack: fix possible register corruption with stack switch helper

s390/stack: fix possible register corruption with stack switch helper This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.47 by commit...

UVI-2021-1001104 cfg80211: call cfg80211_leave_ocb when switching away from OCB

cfg80211: call cfg80211leaveocb when switching away from OCB This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.238 by commit...

SonicWall Switch 缓冲区错误漏洞

SonicWall Switch is a network device. A switch. A buffer overflow vulnerability exists in SonicWall Switch versions prior to 1.1.0.0-11s, which can be exploited by remote attackers to access potentially sensitive information or perform a denial of service DoS attack...

File Upload Vulnerability in the Switch Centralized Management Platform of Shenzhen VMware Technology Co.

Ltd. is a network total solution and smart home solution provider. A file upload vulnerability exists in the switch centralized management platform of Shenzhen WML Technology Co. Ltd. that can be exploited by an attacker to upload a webshell and gain server privileges...

Facebook Sues 4 Vietnamese for Hacking Accounts and $36 Million Ad Fraud

Facebook on Tuesday revealed it filed two separate legal actions against perpetrators who abused its ad platform to run deceptive advertisements in violation of the company's Terms and Advertising Policies. "In the first case, the defendants are a California marketing company and its agents...

Incorrect license management vulnerability for multiple Huawei products

Huawei S12700 and others are an enterprise switch product from Huawei China. Multiple Huawei products have a security vulnerability that stems from improper license management of the device, resulting in the license file not working properly. An attacker with high privileges could use the...

Weak password vulnerability in NNETGEAR GS748Tv5

The NETGEAR GS748Tv5 is a Gigabit Ethernet switch. The NNETGEAR GS748Tv5 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)

The version of ArubaOS-Switch installed on the remote host is affected by multiple vulnerabilities in the Treck IP stack implementation. The vulnerabilities are collectively known as Ripple20, and can result in remote code execution, denial of service DoS, and information disclosure by remote,...

sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

Weak password vulnerability in NETGEAR GS724Tv4

The GS724Tv4 is a 24-port Gigabit Smart Managed Professional Switch with 2 SFP ports. The NETGEAR GS724Tv4 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

NETGEAR Smart Cloud Switch Detection (HTTP)

HTTP based detection of NETGEAR Smart Cloud Switches. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei S2700 安全漏洞

Huawei S12700 and others are an enterprise switch product from Huawei China. Multiple Huawei products have a security vulnerability that stems from improper license management of the device, resulting in the license file not working properly. An attacker with high privileges could use the...

NETGEAR Smart Cloud Switch Command Injection Vulnerability (PSV-2021-0071)

Multiple NETGEAR Smart Cloud Switch devices are prone to an unauthenticated command injection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2021-21005

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards...