scalance_xr552_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/scalance_xr552_firmware/ Sun, 26 Feb 2023 06:40:39 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png scalance_xr552_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/scalance_xr552_firmware/ 32 32 CVE-2020-28393 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-28393/ Sun, 26 Feb 2023 06:40:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-28393/ An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).

The post CVE-2020-28393 appeared first on CVE Vulnerability.

]]> An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).

The post CVE-2020-28393 appeared first on CVE Vulnerability.

]]> CVE-2022-36323 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-36323/ Thu, 23 Feb 2023 05:19:50 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-36323/ Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

The post CVE-2022-36323 appeared first on CVE Vulnerability.

]]> Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.

The post CVE-2022-36323 appeared first on CVE Vulnerability.

]]> CVE-2022-36324 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-36324/ Thu, 23 Feb 2023 05:19:50 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-36324/ Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

The post CVE-2022-36324 appeared first on CVE Vulnerability.

]]> Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

The post CVE-2022-36324 appeared first on CVE Vulnerability.

]]> CVE-2022-36325 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-36325/ Thu, 23 Feb 2023 05:19:50 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-36325/ Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

The post CVE-2022-36325 appeared first on CVE Vulnerability.

]]> Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.

The post CVE-2022-36325 appeared first on CVE Vulnerability.

]]>