CVE-2023-20169

A vulnerability in the Intermediate System-to-Intermediate System IS-IS protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to...

CVE-2023-20115

A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from the underlying operating system of an affected device. This vulnerability is d...

Input validation

A vulnerability in the Intermediate System-to-Intermediate System IS-IS protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to...

CVE-2023-20115

CVE-2023-20115 affects Cisco Nexus 3000 and 9000 Series Switches running in standalone NX-OS mode. The issue is a logic error in the SFTP server when verifying the user role after an SFTP connection is opened. An authenticated, non-administrator user could read or overwrite files on the device’s ...

CVE-2023-20115

A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from the underlying operating system of an affected device. This vulnerability is d...

CVE-2023-20115

A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or overwrite files from the underlying operating system of an affected device. This vulnerability is d...

CVE-2023-20169

A vulnerability in the Intermediate System-to-Intermediate System IS-IS protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to...

The vulnerability of the microprogrammed software of Zyxel series XGS2220, XMG1930, and XS1930 switches lies in the insufficient handling of exceptional states, which allows attackers to trigger service failures.

The vulnerability of the microprogrammed software of Zyxel’s XGS2220, XMG1930, and XS1930 series switches is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2023-38902

A command injection vulnerability in RG-EW series home routers and repeaters v.EW3.01B11P219, RG-NBS and RG-S1930 series switches v.SWITCH3.01B11P219, RG-EG series business VPN routers v.EG3.01B11P219, EAP and RAP series wireless access points v.AP3.01B11P219, and NBC series wireless controllers...

CVE-2023-38902

A command injection vulnerability in RG-EW series home routers and repeaters v.EW3.01B11P219, RG-NBS and RG-S1930 series switches v.SWITCH3.01B11P219, RG-EG series business VPN routers v.EG3.01B11P219, EAP and RAP series wireless access points v.AP3.01B11P219, and NBC series wireless controllers...

PT-2023-4587 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.4R3-S9 Juniper Networks Junos OS version 21.1R1 and later Juniper Networks Junos OS versions prior to 21.2R3-S7 Juniper Networks Junos OS versions prior to 21.3R3-S5 Juniper Networks Junos OS...

PT-2023-26676 · Rg-Nbs +6 · Rg-Nbs +6

Name of the Vulnerable Software and Affected Versions: RG-EW series home routers and repeaters versions EW 3.01B11P204 through EW 3.01B11P219 RG-NBS and RG-S1930 series switches versions SWITCH 3.01B11P218 through SWITCH 3.01B11P219 RG-EG series business VPN routers versions EG 3.01B11P216 throug...

Junos OS PHPRC Environment Variable Manipulation RCE

This module exploits a PHP environment variable manipulation vulnerability affecting Juniper SRX firewalls and EX switches. The affected Juniper devices run FreeBSD and every FreeBSD process can access their stdin by opening /dev/fd/0. The exploit also makes use of two useful PHP features. The...

CVE-2023-35085

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution RCE. Affected Products: All UniFi Access Points Version 6.5.50 and earlier All UniFi Switches Version...

CVE-2023-35085

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution RCE. Affected Products: All UniFi Access Points Version 6.5.50 and earlier All UniFi Switches Version...

Command injection

A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution RCE. Affected Products: All UniFi Access Points Version 6.5.53 and earlier All UniFi Switches Version 6.5.32 and earlier -USW...

Integer overflow

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution RCE. Affected Products: All UniFi Access Points Version 6.5.50 and earlier All UniFi Switches Version...

CVE-2023-35085

The CVE-2023-35085 issue is an integer overflow in UniFi devices (APs and switches, excluding USW Flex Mini) when SNMP monitoring is enabled with default settings, potentially allowing remote code execution (RCE). Affected: UniFi Access Points (v6.5.50 and earlier) and UniFi Switches (v6.5.32 and...

CVE-2023-35085

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution RCE. Affected Products: All UniFi Access Points Version 6.5.50 and earlier All UniFi Switches Version...

Ubiquiti UniFi Command Injection Vulnerability

Ubiquiti UniFi is a wireless networking system from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti UniFi Access Points 6.5.50 and earlier, and Switches 6.5.32 and earlier, which stems from an integer overflow vulnerability in UniFi Access Points and Switches except Switch Flex Mini wi...