CVE-2020-8597

CVE-2020-8597 affects pppd (PPP) versions 2.4.2–2.4.8, due to an incorrect bounds check in the eap_request/eap_response handling that allows a stack buffer overflow on the rhostname. A remote, unauthenticated attacker could cause memory corruption and potentially execute arbitrary code in the ppp...

CVE-2019-18202

CVE-2019-18202 affects WAGO Series PFC100 and PFC200 devices prior to FW12, due to improper access control that enables information disclosure. A remote attacker can determine existence of paths and file names by sending crafted HTTP requests to the device. Impact is information disclosure with l...