Search Results | AttackerKB

78 Total Results

Displaying 31-40 of 78

Attacker Value

Unknown

CVE-2020-1856

Disclosure Date: February 17, 2020 (last updated November 27, 2024)

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage.

Attacker Value

Unknown

CVE-2013-1202

Disclosure Date: February 07, 2020 (last updated February 21, 2025)

Cisco ACE A2(3.6) allows log retention DoS.

Attack Vector: Network Privileges: None User Interaction: None

Attacker Value

Unknown

CVE-2019-5304

Disclosure Date: January 03, 2020 (last updated February 21, 2025)

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

Attack Vector: Network Privileges: None User Interaction: None

Attacker Value

Unknown

CVE-2019-1649

Disclosure Date: May 14, 2019 (last updated November 27, 2024)

A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple Cisco products that support hardware-based Secure Boot functionality. The vulnerability is due to an improper check on the area of code that manages on-premise updates to a Field Programmable Gate Array (FPGA) part of the Secure Boot hardware implementation. An attacker with elevated privileges and access to the underlying operating system that is running on the affected device could exploit this vulnerability by writing a modified firmware image to the FPGA. A successful exploit could either cause the device to become unusable (and require a hardware replacement) or allow tampering with the Secure Boot verification process, which under some circumstances may allow the attacker to install and boot a malicious softw…

Attack Vector: Local Privileges: High User Interaction: None

Attacker Value

Unknown

CVE-2018-7994

Disclosure Date: July 31, 2018 (last updated November 27, 2024)

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.

Attacker Value