Critical Infrastructure at Risk: Advanced Actors Target Smart Install Client

Update: 4/9 Cisco PSIRT has released additional guidance available here. Cisco has recently become aware of specific advanced actors targeting Cisco switches by leveraging a protocol misuse issue in the Cisco Smart Install Client. Several incidents in multiple countries, including some specifical...

CVE-2018-5777

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 17.1.1. Remote clients can take advantage of a misconfiguration in the TFTP server that could allow attackers to execute arbitrary commands on the TFTP server via unspecified vectors...

Design/Logic Flaw

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 17.1.1. Remote clients can take advantage of a misconfiguration in the TFTP server that could allow attackers to execute arbitrary commands on the TFTP server via unspecified vectors...

CVE-2018-5777

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 17.1.1. Remote clients can take advantage of a misconfiguration in the TFTP server that could allow attackers to execute arbitrary commands on the TFTP server via unspecified vectors...

CVE-2018-5777

CVE-2018-5777 affects Ipswitch WhatsUp Gold versions prior to 2017 Plus SP1 (17.1.1). The issue arises from a misconfiguration in the TFTP server, allowing a remote attacker to execute arbitrary commands on the TFTP server via unspecified vectors. The CVE is rated with high/critical impact in the...

Cisco Smart Install Detection

Binary data ciscosmartinstalldetect.nbin...

Cloudview NMS 2.00b Writable Directory Traversal Execution

require 'msf/core' class MetasploitModule "Cloudview NMS 2.00b Writable Directory Traversal Execution", 'Description' = %q This module exploits a vulnerability found in Cloudview NMS server. The software contains a directory traversal vulnerability that allows a remote attacker to write arbitrary...

Directory traversal

Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor SCA 3.0, has a Directory Traversal issue in its TFTP Server, allowing attackers to read arbitrary files via ../ sequences in a pathname...

CVE-2017-9024

Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor SCA 3.0, has a Directory Traversal issue in its TFTP Server, allowing attackers to read arbitrary files via ../ sequences in a pathname...

CVE-2017-9024

Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor SCA 3.0, has a Directory Traversal issue in its TFTP Server, allowing attackers to read arbitrary files via ../ sequences in a pathname...

CVE-2017-9024

CVE-2017-9024 describes a directory traversal vulnerability in Secure Bytes’ Secure Auditor / Cisco Configuration Manager bundled with Secure Auditor (SCA) 3.0. The issue resides in the TFTP Server and allows an attacker to read arbitrary files by using ../ sequences in a pathname. This vulnerabi...

Secure Auditor 3.0 - Directory Traversal Exploit

Exploit for windows platform in category remote exploits + Credits: John Page aka HYP3RLINX Vendor: ==================== www.secure-bytes.com Product: ===================== Secure Auditor - v3.0 Secure Auditor suite is a unified digital risk management solution for conducting automated audits on...

Secure Auditor 3.0 - Directory Traversal

Secure Auditor 3.0 - Directory Traversal + Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SECURE-AUDITOR-v3.0-DIRECTORY-TRAVERSAL.txt + ISR: ApparitionSec Vendor: ==================== www.secure-bytes.com Product:...

Secure Auditor 3.0 Directory Traversal

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SECURE-AUDITOR-v3.0-DIRECTORY-TRAVERSAL.txt + ISR: ApparitionSec Vendor: ==================== www.secure-bytes.com Product: ===================== Secure Auditor - v3.0 Secure...

PT-2018-07: Arbitrary Command Execution in Ipswitch WhatsUp Gold

The specialists of the Positive Research center have detected an Arbitrary Command Execution vulnerability in Ipswitch WhatsUp Gold. Vulnerability in Ipswitch WhatsUp Gold, due to TFTP server misconfiguration, allows remote attackers to execute arbitrary commands on the TFTP server, obtain access...

CVE-2017-7237

The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ aka Write reque...

Design/Logic Flaw

The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ aka Write reque...

CVE-2017-7237

The connected sources confirm CVE-2017-7237 affects Spiceworks Inventory 7.5’s TFTP server. An unauthenticated TFTP service on UDP port 69 allows remote attackers to access the Spiceworks data\configurations directory via a WRQ operation, with the CNVD entry noting potential file overwrite/upload...

CVE-2017-7237

The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ aka Write reque...

Cisco IOS Smart Install Protocol Misuse (cisco-sr-20170214-smi)

The remote Cisco IOS device has the Smart Install feature enabled. The Smart Install SMI protocol does not require authentication by design. The absence of an authorization or authentication mechanism in the SMI protocol between the integrated branch clients IBC and the director can allow a clien...