scalance_x204rna_firmware Archives - CVE Vulnerability

CVE-2018-4833

Sun, 26 Feb 2023 06:50:05 +0000

A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.6), SCALANCE X-300 switch family (incl. SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X408 (All versions < V4.1.3), SCALANCE X414 (All versions), SIMATIC RF182C (All versions). Unprivileged remote attackers located in the same local network segment (OSI Layer 2) could gain remote code execution on the affected products by sending a specially crafted DHCP response to a client's DHCP request.

The post CVE-2018-4833 appeared first on CVE Vulnerability.

CVE-2018-20685

Sun, 26 Feb 2023 06:48:41 +0000

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.

The post CVE-2018-20685 appeared first on CVE Vulnerability.

CVE-2018-15473

Sun, 26 Feb 2023 06:46:40 +0000

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

The post CVE-2018-15473 appeared first on CVE Vulnerability.

CVE-2019-6109

Sun, 26 Feb 2023 06:33:51 +0000

An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.

The post CVE-2019-6109 appeared first on CVE Vulnerability.

CVE-2019-6110

Sun, 26 Feb 2023 06:33:51 +0000

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.

The post CVE-2019-6110 appeared first on CVE Vulnerability.

CVE-2019-16905

Sun, 26 Feb 2023 06:31:23 +0000

OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.

The post CVE-2019-16905 appeared first on CVE Vulnerability.