CVE-2023-48795

The SSH transport protocol, including OpenSSH (before 9.6), is vulnerable to the Terrapin attack (CVE-2023-48795). This vulnerability allows remote attackers to bypass integrity checks during the handshake phase by exploiting how the SSH Binary Packet Protocol (BPP) handles sequence numbers. The ...

CVE-2021-33903

CVE-2021-33903 affects LANCOM LCOS releases 10.40–10.42.0473-RU3 with SNMPv3 enabled: changing the root password via the CLI does not update the SNMPv3 password, while using LANconfig does update it. The root cause is not detailed in the provided documents. No explicit exploits, mitigation, or af...

CVE-2020-23055

CVE-2020-23055 affects ANCOM WLAN Controller models WLC-1000 and WLC-4006. The devices were found to contain multiple cross-site scripting (XSS) vulnerabilities in the /authen/start/ module, exploitable via the userid and password parameters. The issue is documented with CVSS metrics: CVSS v3.1 b...