Cisco NX-OS Software Border Gateway Protocol Denial of Service (CVE-2018-0295)

A vulnerability in the Border Gateway Protocol BGP implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP update...

Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation (CVE-2019-1585)

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Symbolic Link Path Traversal (CVE-2019-1836)

A vulnerability in the system shell for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an authenticated, local attacker to use symbolic links to overwrite system files. These system files may be sensitive and should not be overwritable by non-ro...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port Denial of Service (CVE-2021-1231)

A vulnerability in the Link Layer Discovery Protocol LLDP for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable SFP interface. This vulnerability is due to...

Cisco NX-OS Software Authenticated Simple Network Management Protocol Denial of Service (CVE-2018-0291)

A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol...

Cisco NX-OS FCIP Remote Denial of Service (CVE-2012-1340)

The Fibre Channel over IP FCIP implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service module reload via a crafted FCIP header, aka Bug ID CSCtn93151. This plugin only works with Tenable.ot. Please visit...

Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode DHCP Version 6 Denial of Service (CVE-2018-0372)

A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service DoS condition on an affect...

Juniper Junos OS Vulnerability (JSA69721)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69721 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an adjacent unauthenticated...

Vulnerabilities fixed in Juniper JunOS

Juniper has fixed vulnerabilities in JunOS for several router, firewall and switch products. A malicious party could exploit the vulnerabilities to launch attacks that can result in the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution...

Design/Logic Flaw

A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability is due to an issue with the implementation of the cipher...

CVE-2023-20185

A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability is due to an issue with the implementation of the cipher...

CVE-2023-20185

The CVE-2023-20185 issue affects Cisco Nexus 9000 Series Fabric Switches in ACI mode with Multi-Site CloudSec encryption enabled. The vulnerability stems from the cipher implementation in CloudSec, allowing an unauthenticated, on-path attacker to read or modify intersite encrypted traffic between...

The vulnerability of the CloudSec Encryption function in the ACI mode of the Cisco NX-OS operating system for Cisco Nexus series 9332C, 9364C, and 9500 switches allows a malicious actor to gain unauthorized access to read, modify, or delete data.

The vulnerability of the CloudSec Encryption function in the ACI mode of the Cisco NX-OS operating system for Cisco Nexus series 9332C, 9364C, and 9500 switches is related to the incorrect use of the data encryption algorithm. Exploiting this vulnerability may allow an attacker to gain unauthoriz...

The vulnerability of the microprogrammed software of Siemens SCALANCE industrial switches allows a intruder to execute arbitrary commands in the basic operating system.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands in the basic...

CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

CVE-2023-20188

The CVE-2023-20188 issue affects Cisco Small Business 200 Series Smart Switches, 300 Series Managed Switches, and 500 Series Stackable Managed Switches. It is a web-based management interface stored XSS caused by insufficient input validation, exploitable by an authenticated user who views a page...

多款Cisco产品 跨站脚本漏洞

Cisco Small Business 200 Series Smart Switches and so on are the products of the American Cisco Cisco company.Cisco Small Business 200 Series Smart Switches is a small smart switch device.Cisco Small Business 300 Series is an enterprise-class managed switch.Cisco Small Business 300 Series Managed...

CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...