Code injection

The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service reboot via a flood of TCP SYN packets...

CVE-2013-3588

The CVE-2013-3588 entry concerns Zyxel P660 series devices where the web management interface is vulnerable to a denial of service caused by a flood of TCP SYN packets. Remote attackers can trigger a reboot, effectively taking the device offline via a network-based SYN flood. The NVD and CERT ref...

PT-2014-2688

Name of the Vulnerable Software and Affected Versions Zyxel P660 devices affected versions not specified Description The issue affects the web management interface, allowing remote attackers to cause a denial of service, resulting in a device reboot. This can be achieved by sending a flood of TCP...

PT-2014-4799

Name of the Vulnerable Software and Affected Versions Siemens RuggedCom ROS versions prior to 3.11 Siemens RuggedCom ROS version 3.11 prior to 3.11.5 for RS950G Siemens RuggedCom ROS version 3.12 Siemens RuggedCom ROS version 4.0 for RSG2488 Description The issue allows remote attackers to cause ...

CVE-2014-2590: Missing Authentication for Critical Function

The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service interface outage via crafted HTTP packets...

3Com Web Management Interface Default Credentials

The remote 3Com Web Management Interface that uses a set of known, default credentials. Knowing these, an attacker can gain control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73190;...

Design/Logic Flaw

The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obta...

CVE-2014-0683: Undefined Security Weakness

The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obta...

PT-2014-3778

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions 1.2.0.9 and earlier Cisco RV215W versions 1.1.0.5 and earlier Cisco CVR100W versions 1.0.1.19 and earlier Description The issue concerns the web management interface of certain Cisco devices, where it fails to prevent the...

Reflected cross-site scripting (XSS) vulnerability in Mediatrix Web Management Interface login page

Advisory ID: hag201476 Product: Mediatrix Web Management Interface Vendor: Media5 Corporation Vulnerable Versions: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 and probably prior Tested Version: Mediatrix 4402 Device with Firmware Dgw 1.1.13.186 Advisory Publication: January 23, 2014 Vendor...

CVE-2014-1612

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

PT-2014-4257

Name of the Vulnerable Software and Affected Versions Media5 Mediatrix 4402 VoIP Gateway versions Dgw 1.1.13.186 and earlier Description A cross-site scripting issue exists in the Web Management Interface, specifically in login.esp, allowing remote attackers to inject arbitrary web script or HTML...

CVE-2013-5554

Cisco WAAS Mobile Server prior to version 3.5.5 is affected by a directory-traversal vulnerability in the web-management interface that allows remote attackers to upload and execute arbitrary files via a crafted HTTP POST request (Bug ID CSCuh69773). The issue enables remote code execution with t...

PT-2013-5635

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services WAAS Mobile versions prior to 3.5.5 Description The issue is related to a directory traversal vulnerability in the web-management interface of the server. This allows remote attackers to upload and execute...

CVE-2013-5554: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web-management interface in the server in Cisco Wide Area Application Services WAAS Mobile before 3.5.5 allows remote attackers to upload and execute arbitrary files via a crafted POST request, aka Bug ID CSCuh69773...

Cisco Unified Computing System Fabric Interconnect Cross-Site Request Forgery Vulnerability

A vulnerability in the fabric interconnect FI web management interface of the Cisco Unified Computing System could allow an unauthenticated, remote attacker to conduct cross-site request forgery CSRF attacks. The vulnerability occurs because the web interface relies on cookies to authenticate...

CVE-2012-4084

Cross-site request forgery CSRF vulnerability in the web-management interface in the fabric interconnect FI component in Cisco Unified Computing System UCS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755...

CVE-2012-4084

Cross-site request forgery CSRF vulnerability in the web-management interface in the fabric interconnect FI component in Cisco Unified Computing System UCS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755...

CVE-2012-4084

Cisco UCS Fabric Interconnect web management interface CSRF vulnerability (CVE-2012-4084) allows unauthenticated remote attackers to hijack user authentication via cookie-based session handling. Exploitation would enable the attacker to perform actions as the affected user; Cisco notes that softw...