Design/Logic Flaw

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch...

Remote code execution

An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system, leading to a complete compromise of the switc...

Hewlett Packard Enterprise FlexFabric 5700 Switch: Input validation error vulnerability

Hewlett Packard Enterprise FlexFabric HPE FlexFabric is a series of switches from Hewlett Packard Enterprise USA. A security vulnerability exists in the Hewlett Packard Enterprise FlexFabric 5700 Switch that stems from the switch allowing host header injection and URL redirection...

CVE-2023-1168

CVE-2023-1168: An authenticated remote code execution vulnerability exists in the Aruba AOS-CX Network Analytics Engine. Multiple sources confirm that exploitation allows arbitrary code execution as a privileged user on the underlying OS, resulting in a full compromise of the switch running AOS-C...

CVE-2023-1168: Improper Neutralization of Special Elements used in a Command

An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system, leading to a complete compromise of the switc...

HPESBNW04460 rev.3 - HPE Aruba CX Switches, Remote Escalation of Privilege

Potential Security Impact: Remote: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series - AOS-CX 10.10.xxxx: 10.10.1020 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx:...

TP-Link T2600G-28SQ uses vulnerable SSH host keys

Overview TP-Link layer-2 switch T2600G-28SQ uses vulnerable SSH host keys CWE-1391. Kuniyuki Hasegawa of VeriServe Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact The credential information for a...

TP-LINK T2600G-28SQ security vulnerabilities

The TP-LINK T2600G-28SQ is a switch from China P&L TP-LINK. A security vulnerability exists in the TP-LINK T2600G-28SQ. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

CVE-2022-37940

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch...

CVE-2022-37940

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch...

CVE-2022-37940

CVE-2022-37940 describes vulnerabilities in the HPE FlexFabric 5700 Switch Series that could be remotely exploited to allow host header injection and URL redirection . Affected firmware: versions prior to R2432P61 ; remediation is to upgrade to R2432P61 or later . The provided documents do not sp...

SUSE CVE-2022-22075

Information Disclosure in Graphics during GPU context switch...

PT-2023-13564 · Hewlett Packard · Hpe Flexfabric 5700 Switch Series

Name of the Vulnerable Software and Affected Versions: HPE FlexFabric 5700 Switch Series versions prior to R2432P61 Description: The issue concerns potential security vulnerabilities in the HPE FlexFabric 5700 Switch Series, which could be remotely exploited to allow host header injection and URL...

CVE-2022-37940: URL Redirection to Untrusted Site

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch...

PT-2023-36086 · Gitoxide · Gitoxide

Name of the Vulnerable Software and Affected Versions: gitoxide project affected versions not specified Description: The gitoxide project has undergone a renaming of its crates from git- to gix-, with the git- prefixed crates no longer being updated. Recommendations: To continue receiving updates...

CVE-2022-22075

Information Disclosure in Graphics during GPU context switch...

Information disclosure

Information Disclosure in Graphics during GPU context switch...

HPESBNW04398 rev.1 - HPE FlexFabric 5700 Switches, Multiple Vulnerabilities

Potential Security Impact: Remote: URL Redirection, Host Header Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE FlexFabric 5700 Switch Series - Prior to R2432P61 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-37940 |...

CVE-2022-22075 Information Exposure in Graphics

Information Disclosure in Graphics during GPU context switch...

CVE-2022-22075

CVE-2022-22075 concerns Information Disclosure in Graphics during GPU context switch, with affected component listed as Qualcomm Display. The CVE is documented in multiple sources, including NVD and Qualcomm security references, indicating a vulnerability in the graphics/GPU context switch pathwa...