PT-2017-11508

Name of the Vulnerable Software and Affected Versions AT&T U-verse firmware version 9.2.2h0d83 for Arris NVG589 and NVG599 devices Description The issue concerns the configuration of an sbdc.ha WAN TCP service on port 61001 with a specific account and password, allowing remote attackers to obtain...

CVE-2017-14117: Improper Authentication

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP connections to intranet hosts by sending \x2a\xce\x01...

CVE-2017-10793: Exposure of Sensitive Information to an Unauthorized Actor

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on port 61001 with the bdctest account and the bdctest password, which allows remote attackers to obtain sensitive...

Open WAN-to-LAN proxy on AT&T routers

The Arris NVG589 and NVG599 routers configured with AT&T U-verse firmware 9.2.2h0d83 expose an un-authenticated proxy that allows connecting from WAN to LAN by MAC address. Module Options msf use auxiliary/scanner/wproxy/att/openproxy msf undefinedopenproxy show actions ...actions... msf...

Twenty-two brand router vulnerability Distribution Report-vulnerability warning-the black bar safety net

Now, with cybercrime techniques to constantly renovate our home router has also recently become a cyber-attack new target. In fact, home routers indeed there are a lot of security vulnerabilities. Álvaro Folgado Rueda and many other network security experts recently wrote a report, in-depth...

How To Add Additional Storage to an Existing SD-WAN Center VM

The objective of this article is to provide assistance on how to add some additional storage from what was initially configured during the initial import of a NetScaler SD-WAN Center VM...

FAQ: NetScaler SD-WAN Center and Hardware Requirements

Question: Is It Possible to Increase the Cores and RAM of an Existing SD-WAN Center VM? Answer: Yes it is possible to increase the cores and RAM of an existing SD-WAN Center VM. If the hypervisor has sufficient resources shutdown the SD-WAN Center instance and increase the Cores and RAM to the...

CVE-2017-6784

The CVE-2017-6784 issue affects Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers. The vulnerability arises in the web interface where sensitive data can be exposed in HTTP responses due to Cisco WebEx Meetings not adequately protecting data when replying to web requests. An unauthentic...

CVE-2017-6784: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to Cisco...

Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers Information Disclosure Vulnerability

A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to Cisco...

IPS as a Service Blocks WannaCry Spread Across the WAN

One of the most devastating aspects of the recent WannaCry ransomware attack was its self-propagating capability exploiting a vulnerability in the file access protocol, SMB v1. Most enterprises defences are externally-facing, focused on stopping incoming email and web attacks. But, once attackers...

Design/Logic Flaw

Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to exposure of kernel memory...

PT-2017-18248

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to a userspace-controlled non null terminated parameter for IPA WAN ioctl in Qualcomm products. This can...

CVE-2017-8269: Exposure of Sensitive Information to an Unauthorized Actor

Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to exposure of kernel memory...

NetScaler SD-WAN Troubleshooting Guide

Citrix SD-WAN, formerly NetScaler SD-WAN This articles helps you diagnose, troubleshoot, and resolve common issue encountered on NetScaler SD-WAN. Note : This is a master overview article. The detailed information for each topic is covered in its individual articles. CTX236987 - Information to Ke...

NetScaler SD-WAN QOS and Application Rules

Citrix SD-WAN, formerly NetScaler SD-WAN Table of Contents Introduction QOS Components Transmit Modes Queue Depth IP Rules Application QOS rules with release 9.3 Basic Rules Basic guidance on Rules. Other Settings that affect Applications. Appendix A: Default Rules Breakdown Introduction The...

Hardcoded credentials

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941T firmware version DPC39412.5s3PRODsey devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded...

CVE-2017-9487

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941T firmware version DPC39412.5s3PRODsey devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address...

CVE-2017-9487

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941T firmware version DPC39412.5s3PRODsey devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address...

CVE-2017-9487

The CVE-2017-9487 issue affects Cisco DPC3939 and DPC3941T Comcast firmware. A remote attacker could discover a WAN IPv6 address by leveraging knowledge of the CM MAC address, affecting firmware versions dpc3939-P20-18-v303r20421746-170221a-CMCST (DPC3939) and DPC3941_2.5s3_PROD_sey (DPC3941T). T...