6984 matches found
CVE-2019-1010250
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: createFlow and createFlows functions in FlowWebResource.java RESTful service. The...
CVE-2019-1010252
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: applyFlowRules and apply functions in FlowRuleManager.java. The attack vector is:...
Integer overflow
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: createFlow and createFlows functions in FlowWebResource.java RESTful service. The attack...
Input validation
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: applyFlowRules and apply functions in FlowRuleManager.java. The attack vector is:...
CVE-2019-1010250
CVE-2019-1010250 affects the Linux Foundation ONOS platform (2.0.0 and earlier). The vulnerability stems from poor input-validation in the RESTful service functions createFlow() and createFlows() in FlowWebResource.java, which can allow a network administrator or attacker to inadvertently install...
CVE-2019-1010252
The Linux Foundation ONOS 2.0.0 and earlier is affected by Poor Input-validation in FlowRuleManager.java (applyFlowRules() and apply()). This can allow a network administrator or attacker to install unintended flow rules in the switch via network-management connectivity. Root cause: inadequate in...
CVE-2019-1010252
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: applyFlowRules and apply functions in FlowRuleManager.java. The attack vector is:...
PT-2019-4364
Name of the Vulnerable Software and Affected Versions ONOS versions 2.0.0 and earlier Description The issue is caused by an integer overflow in the createFlow and createFlows functions within the FlowWebResource.java file, which is part of the RESTful service. This can allow a network administrat...
SCALANCE X Switch Buffer Overflow
The vulnerability of the SCALANCE X microcontroller’s software is related to incorrect storage of user credentials. Exploiting this vulnerability could allow an intruder to retrieve passwords from the device access to the device’s configuration files is required...
Eventum Cross-Site Scripting Vulnerability (CNVD-2019-22273)
Eventum is a defect tracking system. The system is used to track inbound technical support, organizational tasks, bugs, etc. A cross-site scripting vulnerability exists in the htdocs/switch.php file in Eventum version 3.5.0, which stems from a lack of proper validation of client-side data in the...
CVE-2019-5446
Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root...
PT-2019-17675 · Edgemax · Edgeswitch
Name of the Vulnerable Software and Affected Versions: EdgeMAX EdgeSwitch versions prior to 1.8.2 Description: The issue allows an Admin user to execute commands as root, which could lead to unauthorized access and control of the system. Recommendations: For versions prior to 1.8.2, update to...
Emerson DeltaV Distributed Control System
1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Low skill level to exploit Vendor: Emerson Equipment: DeltaV Distributed Control System DCS Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain administrative...
Security Bulletin: Multiple vulnerabilities exist in the current IBM SDK for Java used in IBM System Networking Switch Center (CVE-2014-0411 & CVE-2014-0460)
Summary IBM System Networking Switch Center ships with IBM Java 7 JRE. Two vulnerabilities are fixed in the April 2014 Critical Patch Update. 1 CVE-2014-0460: JNDI DNS service provider has several implementation flaws that make spoofing DNS responses much easier; 2 CVE-2014-0411: Vulnerability in...
Siemens SCALANCE XR526-8C Managed IE Switch
Binary data 764617.prm...
Siemens 6GK52040BA002AF2 4 RJ45 port Ethernet Switch
Binary data 764538.prm...
Siemens SCALANCE XR524-8C Managed IE Switch
Binary data 764610.prm...
Siemens SCALANCE XR552-12M Managed IE Switch
Binary data 764628.prm...