CVE-2022-23689

Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an attacker to impact the availability of the AOS-CX LLDP service and/or the management plane of the switch in ArubaOS-CX Switches versions:...

CVE-2022-23686

ArubaOS-CX LLDP service processing in AOS-CX is vulnerable. Affected versions are ArubaOS-CX Switches 10.09.xxxx up to 10.09.1010 and below, 10.08.xxxx up to 10.08.1050 and below, and 10.06.xxxx up to 10.06.0190 and below. The vulnerabilities may impact LLDP service availability and/or the manage...

CVE-2022-23681

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

CVE-2022-23683

CVE-2022-23683 describes authenticated command‑injection vulnerabilities in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation allows executing arbitrary commands as a privileged user on the underlying OS, potentially achieving complete compromise of switches running Aru...

CVE-2022-23682

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

CVE-2022-23682

Multiple vulnerabilities exist in the Aruba AOS-CX command line interface that could permit authenticated command injection, allowing an attacker to execute arbitrary commands as root and fully compromise the switch. Affected ArubaOS-CX versions are: 10.09.xxxx up to 10.09.1030, 10.08.xxxx up to ...

CVE-2022-23682: Improper Neutralization of Special Elements used in an OS Command

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

CVE-2022-23681: Improper Neutralization of Special Elements used in an OS Command

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

CVE-2022-23691: Undefined Security Weakness

A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches versions:...

PT-2022-16197 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.09.1010 and below ArubaOS-CX Switches versions 10.08.1050 and below ArubaOS-CX Switches versions 10.06.0190 and below Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP...

PT-2022-16202 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.10.0002 and below ArubaOS-CX Switches versions 10.09.1030 and below ArubaOS-CX Switches versions 10.08.1070 and below ArubaOS-CX Switches versions 10.06.0210 and below Description: A vulnerability exists in...

Mitsubishi Electric Multiple Factory Automation Products (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module Vulnerabilities: Infinite Loop, OS Command Injection 2...

CVE-2022-37074

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switchdebuginfoset...

CVE-2022-37074

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switchdebuginfoset...

H3C GR-1200W Buffer Error Vulnerability

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the switchdebuginfoset method...

PT-2022-23788 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W MiniGRW1A0V100R006 Description: A stack overflow issue was discovered via the function switch debug info set. Recommendations: For H3C GR-1200W MiniGRW1A0V100R006, consider disabling the switch debug info set function as a...

OPENSUSE-SU-2022:10089-1 Security update for seamonkey

This update for seamonkey fixes the following issues: update to SeaMonkey 2.53.13 Updates to devtools. Updates to build configuration. Starting the switch from Python 2 to Python 3 in the build system. Removal of array comprehensions, legacy iterators and generators bug 1414340 and bug 1098412...

CVE-2022-35525

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter ledswitch, which leads to command injection in page /ledonoff.shtml...

Multiple WAVLINK products have security vulnerabilities

WAVLINK AC1200 and so on are products of China RuiYin Technology WAVLINK company.WAVLINK AC1200 is a dual-band high-power wireless router.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router. A security vulnerability exists in WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3,...

HPESBST04353 rev.1 - HPE B-series Fibre Channel SAN Switch Brocade Fabric OS (FOS), Directory Traversal

Potential Security Impact: Local: Directory Traversal; Remote: Directory Traversal SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 8/8 SAN Switch - v7.4.1b and v7.3.1d HPE 8/24 SAN Switch - v7.4.1b and v7.3.1d Brocade 8Gb SAN Switch for HPE BladeSystem c-Class - v7.4.1b and...