4252 matches found
Cisco IOS XE Software Arbitrary Code Execution (cisco-sa-ios-xe-evss-code-exe-8cw5VSvw)
According to its self-reported version, Cisco IOS-XE Software is affected by an arbitrary code execution vulnerability. An unauthenticated, remote attacker can execute arbitrary code on the underlying Linux operating system of an affected device. The vulnerability is due to incorrect boundary...
Cisco IOS XE Software SD WAN Console Privilege Escalation (cisco-sa-sdwan-esc-rSNVvTf9)
A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs...
Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2021-2164)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2021-2165)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco IOS XE Software SD WAN Arbitrary Command Execution (cisco-sa-iosxe-sdwarbcmdexec-sspOMUr3)
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected device as a low-privileged user to exploit this...
Cisco IOS XE Software Privilege Escalation Vulnerability (cisco-sa-priv-esc1-OKMKFRhV)
According to its self-reported version, Cisco IOS XE Software is affected by a privilege escalation vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. The vulnerability is due t...
Citrix Workspace app showing white screen, screen does not refresh, app resize issues on client machines running Intel Iris Xe-Treiber video driver
-Citrix Workspace App won’t load/refresh, it stays just white screen -It is possible to refresh the apps by resizing the workspace app, but that is not a viable solution. -All version of Citrix workspace app is affected 20, 21.3, 21.4 TP...
Citrix Hypervisor 8.2 : xe-toolstack-restart causes the PVS VMs to go into PowerState Unknown.
PVS VMs may showPowerState Unknown inCitrix Studio when the toolstack is restarted on the XenServer Hypervisor hosting the VMs. Currently logged in sessions will be unaffected however any new user trying to log may encounter an error as the site is unable to determine if any VMs are powered on an...
Cisco Firepower Threat Defence Snort HTTP Detection Engine File Policy Bypass (cisco-sa-http-fp-bp-KfDdcQhc)
According to its self-reported version, Cisco IOS XE is affected by a vulnerability in the Snort detection engine due to a flaw in the handling of HTTP header parameters. An unauthenticated, remote attacker can exploit this by sending crafted HTTP packets through an affected device. A successful...
Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass (cisco-sa-http-fp-bp-KfDdcQhc)
According to its self-reported version, Cisco IOS XE is affected by a vulnerability in the Snort detection engine due to a flaw in the handling of HTTP header parameters. An unauthenticated, remote attacker can exploit this by sending crafted HTTP packets through an affected device. A successful...
Cisco IOS XE Software DECnet Phase IV/OSI DoS (cisco-sa-iosxe-decnet-dos-cuPWDkyL)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing. This vulnerability allows an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerabili...
The vulnerability in the web interface of Cisco IOS XE allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the Cisco IOS XE operating system’s web interface is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
The vulnerability of the initialization procedure for Cisco IOS XE microprogrammed software on Cisco 1100 Series routers allows a hacker to execute arbitrary code.
The vulnerability of the initialization procedure for Cisco IOS XE microprogrammed software on Cisco 1100 Series routers exists because measures to neutralize special elements used in the operating system commands have not been taken. Exploiting this vulnerability can allow an attacker to execute...
Cisco IOS XE Software ROM Monitor for Industrial Switches Command Injection (cisco-sa-iosxe-romvar-cmd-inj-N56fYbrw)
According to its self-reported version, IOS-XE is affected by a command injection vulnerability due to incorrect validations of specific function arguments passed to a boot script when specific ROMMON variables are set. An unauthenticated, physical attacker can exploit this by setting malicious...
The vulnerability of the Cisco IOS XE software’s command-line interface allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Cisco IOS XE software’s command-line interface is related to the existence of an undocumented feature in command input fields that allows for the manipulation of variable values. Exploiting this vulnerability could enable a perpetrator to compromise the confidentiality an...
The vulnerability of the CLI component in Cisco IOS XE routers for Cisco IOS XE SD-WAN allows a attacker to gain access to the basic operating system with superuser privileges.
The vulnerability of Cisco IOS XE operating system routers in Cisco IOS XE SD-WAN devices exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to the basic operating system with superuser privileges...
The vulnerability in the web interface of Cisco IOS XE allows a hacker to trigger a service failure.
The vulnerability in the web interface of Cisco IOS XE exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially crafted HTTP packet...
The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface allows attackers to compromise the integrity of protected information.
The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a attacker to compromise the integrity of the protected information...
Cisco IOS XE Software Common Industrial Protocol Privilege Escalation (cisco-sa-XE-SAP-OPLbze68)
A vulnerability in the CLI command permissions of Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial Protocol CIP and then remotely configure the device as an administrative user. This vulnerability exists because incorrect permission...
Cisco IOS XE Software ARP Resource Management Exhaustion Denial of Service (cisco-sa-arp-mtfhBfjE)
A vulnerability in Address Resolution Protocol ARP management of Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent an affected device from resolving ARP entries for legitimate hosts on the connected subnets. This vulnerability exists because ARP entries are...