Authentication flaw

In Silex SX-500 all versions and GE MobileLinkGEH-500 version 1.54 and prior, authentication is not verified when making certain POST requests, which may allow attackers to modify system settings...

CVE-2018-6020

In Silex SX-500 all versions and GE MobileLinkGEH-500 version 1.54 and prior, authentication is not verified when making certain POST requests, which may allow attackers to modify system settings...

CVE-2018-6020

CVE-2018-6020 affects Silex SX-500 series and GE MobileLink (GEH-500) devices (version 1.54 and earlier). The vulnerability is an improper authentication on certain POST requests, allowing an attacker to modify system settings. Public documentation from ICS-CERT/ENISA details that these products ...

Silex Technology SX-500/SD-320AN or GE Healthcare MobileLink (Update B)

1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION : Exploitable Remotely / Low skill level to exploit / Public exploits are available Vendors : Silex Technology, GE Healthcare Equipment : SX-500, SD-320AN, MobileLink Vulnerabilities : Improper Authentication, OS Command Injection 2. UPDATE INFORMATION...

CVE-2017-3825

A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to...

Cisco TelePresence XML Application Programming Interface Authentication Bypass Vulnerability (cisco-sa-20160504-tpxml)

Cisco TelePresence Codec TC and Collaboration Endpoint CE Software are vulnerable to a vulnerability in the XML application programming interface API which could allow an unauthenticated, remote attacker to bypass authentication and access a targeted system through the API SPDX-FileCopyrightText:...

ISC BIND 9.9.8-Sx < 9.9.8-S5 REQUIRE Assertion DoS

According to its self-reported version number, the version of BIND 9 Supported Preview Edition running on the remote host is version 9.9.8-Sx prior to 9.9.8-S5. It is, therefore, affected by a denial of service vulnerability due to a flaw in file rdataset.c related to handling flag values in...

PicketBox JBossSX Arbitrary File Execution Vulnerability

PicketBox is a set of java security framework , it provides developers with authentication , authorization , auditing and security mapping functions . An arbitrary file execution vulnerability exists in PicketBox JBossSX, which allows remote authenticated users to exploit the vulnerability to rea...

CVE-2014-0059

JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform EAP before 6.2.3, use world-readable permissions on audit.log, which allows local users to obtain sensitive information by reading this file...

CVE-2014-3889

silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service connectivity outage via crafted data in the Options field of a TCP header, a different vulnerability than CVE-2014-3890...

CVE-2014-3890

silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service connectivity outage via a crafted IP packet, a different vulnerability than CVE-2014-3889...

Code injection

silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service connectivity outage via crafted data in the Options field of a TCP header, a different vulnerability than CVE-2014-3890...

Code injection

silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service connectivity outage via a crafted IP packet, a different vulnerability than CVE-2014-3889...

CVE-2014-3889

The CVE-2014-3889 entry affects silex SX-2000WG devices with firmware prior to 1.5.4. According to connected JVNDB documentation, a remote attacker can cause a denial-of-service (connectivity outage) by sending crafted IP packets that exploit IP packet processing in the device. This DoS impact is...

CVE-2014-3889

silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service connectivity outage via crafted data in the Options field of a TCP header, a different vulnerability than CVE-2014-3890...

CVE-2014-3890

silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service connectivity outage via a crafted IP packet, a different vulnerability than CVE-2014-3889...

CVE-2014-3890

Affected product : Silex SX-2000WG devices with firmware before 1.5.4. Vulnerability : remote attacker can cause a denial of service (connectivity outage) by sending a crafted IP packet (CVE-2014-3890). Impact : DoS leading to loss of connectivity. Root cause / vector : handling of IP packets in ...

SX-2000WG vulnerable to denial-of-service (DoS)

Overview SX-2000WG provided by silex technology, Inc. is a product that provides wireless connectivity for USB devices such as printers and hard disk drives HDD. SX-2000WG contains an issue in the processing of IP packets, which may cause a denial-of-service DoS. Note that this vulnerability is...

SX-2000WG vulnerable to denial-of-service (DoS)

Overview SX-2000WG provided by silex technology, Inc. is a product that provides wireless connectivity for USB devices such as printers and hard disk drives HDD. SX-2000WG contains an issue in the processing of TCP Option header, which may cause a denial-of-service DoS. Note that this vulnerabili...

JVN#35998716: SX-2000WG vulnerable to denial-of-service (DoS)

SX-2000WG provided by silex technology, Inc. is a product that provides wireless connectivity for USB devices such as printers and hard disk drives HDD. SX-2000WG contains an issue in the processing of IP packets, which may cause a denial-of-service DoS. Impact A remote attacker may cause the...