4 TOTOLINK Router Models - Cross-Site Request Forgery Cross-Site Scripting

4 TOTOLINK Router Models - Cross-Site Request Forgery Cross-Site Scripting Advisory Information Title: 4 TOTOLINK router models vulnerable to CSRF and XSS attacks Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x01.txt Blog URL:...

ipTIME n104r3 vulnerable to CSRF and XSS attacks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: iptime n104r3 vulnerable to CSRF and XSS attacks Advisory URL: https://pierrekim.github.io/advisories/2015-iptime-0x01.txt Blog URL:...

CVE-2015-4224

Cisco Wireless LAN Controller WLC devices with software 7.0240.0 allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474...

Command injection

Cisco Wireless LAN Controller WLC devices with software 7.0240.0 allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474...

CVE-2015-4224

Cisco Wireless LAN Controller (WLC) running 7.0(240.0) is affected by CVE-2015-4224. The issue resides in the CLI processor, where insufficient input validation allows an authenticated, local attacker to inject and execute arbitrary OS commands with elevated privileges via crafted CLI commands. I...

CVE-2015-4224

Cisco Wireless LAN Controller WLC devices with software 7.0240.0 allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474...

Cisco Wireless LAN Controller Command Injection Vulnerability

A vulnerability in the command-line interface CLI processor of the Cisco Wireless LAN Controller WLC could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges on the underlying operating system. The vulnerability is due to insufficient...

Cisco Wireless LAN Controller IPv6 Packet Processing Denial of Service Vulnerability

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. The Cisco Wireless LAN Controller WLC device does not properly handle anomalies generated when forwarding IPv6 packets, which is a...

CVE-2015-4215

Cisco Wireless LAN Controller WLC devices with software 7.5102.0 and 7.61.62 allow remote attackers to cause a denial of service device crash by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046...

Code injection

Cisco Wireless LAN Controller WLC devices with software 7.5102.0 and 7.61.62 allow remote attackers to cause a denial of service device crash by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046...

CVE-2015-4215

Cisco Wireless LAN Controller WLC devices with software 7.5102.0 and 7.61.62 allow remote attackers to cause a denial of service device crash by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046...

Cisco Wireless LAN Controller IPv6 Packet Handling Denial of Service Vulnerability

A vulnerability in Cisco Wireless LAN Controller WLC devices could allow an unauthenticated, adjacent attacker could to cause a crash of an affected device. The vulnerability exists due to an unhandled exception that may occur when IPv6 traffic is forwarded to a device that is not configured for...

The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller 2000 allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller 5500 allows a malicious attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

The vulnerability of the Microprogrammed Software of the Cisco Wireless LAN Controller 4400 allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

The vulnerability of the Microprogramming Software of the Cisco Wireless LAN Controller 4100 allows a malicious attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

Cisco Wireless LAN Controller TCP Traffic Handling Denial of Service Vulnerability

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. Cisco Wireless LAN Controller 7.4 1.1 and other versions process TCP traffic incorrectly, allowing attackers to exploit vulnerabiliti...

CVE-2015-0756

Cisco Wireless LAN Controller WLC devices with software 7.41.1 allow remote attackers to cause a denial of service wireless-networking outage via crafted TCP traffic on the local network, aka Bug ID CSCug67104...

Code injection

Cisco Wireless LAN Controller WLC devices with software 7.41.1 allow remote attackers to cause a denial of service wireless-networking outage via crafted TCP traffic on the local network, aka Bug ID CSCug67104...

CVE-2015-0756

CVE-2015-0756 affects Cisco Wireless LAN Controller (WLC) devices running software 7.4(1.1) and related versions. The vulnerability stems from improper input validation in TCP traffic handling, allowing an unauthenticated, adjacent attacker to send crafted TCP packets to cause a denial-of-service...