6972 matches found
CVE-2022-22509
CVE-2022-22509 affects Phoenix Contact FL SWITCH Series 2xxx (version 3.00). The issue is an incorrect privilege assignment that lets a low-privilege user gain full access to the device configuration, exposing confidentiality, integrity, and availability (all rated high) per CVSS metrics. No expl...
CVE-2022-22509: Improper Privilege Management
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration...
PT-2022-15479
Name of the Vulnerable Software and Affected Versions Phoenix Contact FL SWITCH Series 2xxx version 3.00 Description The issue is related to an incorrect privilege assignment, allowing a low-privileged user to gain full access to the device configuration. Recommendations For Phoenix Contact FL...
Phoenix Contact FL SWITCH security vulnerability
The Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact FL SWITCH Series that originates from allowing a user with low privileges to enable full access to the device configuration...
CVE-2022-22560
Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...
HPESBNW04234 rev.1 - HPE FlexNetwork 5130 EL Switch Series, Local Buffer Overflow
Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE FlexNetwork 5130 EI Switch Series - Prior to 5130EI7.10.R3507P02 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29219 |...
Mageia: Security Advisory (MGASA-2020-0041)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-22509
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration...
BRATA Android Trojan Updated with ‘Kill Switch’ that Wipes Devices
New variants of the BRATA banking trojan have been targeting global Android devices since November with advanced features, including the ability to wipe devices after stealing user data, tracking devices via GPS, and novel obfuscation techniques, researchers have found. The remote access trojan...
Mobile Banking Trojan BRATA Gains New, Dangerous Capabilities
The Android malware tracked as BRATA has been updated with new features that grants it the ability to record keystrokes, track device locations, and even perform a factory reset in an apparent bid to cover up fraudulent wire transfers. The latest variants, detected late last year, are said to be...
Buffer Overflow Vulnerability in Multiple Huawei Products (CNVD-2022-17397)
The Huawei CloudEngine 12800 is a 12800 series data center switch, and the Huawei Cloudengine 5800 is a 5800 series data center switch. Buffer overflow vulnerability exists in several Huawei products. The vulnerability stems from insufficient validation of certain parameters in messages, which ca...
CVE-2022-22174
A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and eventual Denial of Service DoS condition. Once the condition occurs, further packet processin...
Huawei’s various products have buffer error vulnerabilities
The Huawei CloudEngine 12800 is a 12800 series data center switch, and the Huawei Cloudengine 5800 is a 5800 series data center switch. Buffer overflow vulnerability exists in several Huawei products. The vulnerability stems from insufficient validation of certain parameters in messages, which ca...
Cisco Small Business 220 Series Smart Switch Service Data Protection
The vulnerability of the microprogrammed software of Cisco Small Business 220 Series Smart Switches lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain access to login credentials or reconfigure passwords in the user account...
CVE-2021-28507
An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent...
Cisco Small Business 220 Series Smart Switch Detection
Binary data ciscosmallbusiness220seriessmartswitchdetect.nbin...
PT-2022-3248
Name of the Vulnerable Software and Affected Versions Zoom Client for Meetings versions prior to 5.10.0 Description The issue is related to the improper validation of the hostname during a server switch request. This could be used in a sophisticated attack to trick an unsuspecting user's client...
CVE-2021-30298
Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wire...
PT-2025-8587
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel was discovered related to changing the MAX FRAME SIZE of a switch. If the MAX FRAME SIZE is changed while the cpu port is on, the switch panics and stops...
ZyXEL GS1900 Access Control Error Vulnerability
Zyxel ZyXEL GS1900 is a managed switch from Zyxel Taiwan, China. An Access Control Error vulnerability exists in multiple Zyxel products, which stems from the product's TFTP client not adding privilege controls to the functions that can execute system commands. The vulnerability can be exploited ...