Nikita Abramov

Name of the Vulnerable Software and Affected Versions: OnCell G3470A-LTE Series firmware versions v1.7.7 and prior Description: The issue is related to the use of uncontrolled format strings, which can be exploited by a remote attacker to cause a denial of service. An attacker could modify an externally controlled format string to cause a memory leak. Recommendations: For OnCell G3470A-LTE Series firmware versions v1.7.7 and prior, consider restricting the acceptance of format strings from external sources as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to missing bounds checking on buffer operations, which could allow an attacker to write past the boundaries of allocated buffer regions in memory, causing a program crash. This can be exploited by a remote attacker to cause a denial of service.

The issue is related to a lack of neutralized inputs in the IPSec configuration, allowing an attacker to modify intended commands sent to target functions. This could enable malicious users to execute unauthorized commands by sending specially crafted network requests.

The issue is related to a lack of neutralized inputs in the web key upload function, allowing an attacker to modify intended commands sent to target functions. This could enable malicious users to execute unauthorized commands. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary code by sending specially crafted network requests.

The issue is related to an information disclosure vulnerability in the ArubaOS web-based management interface. This vulnerability allows a remote attacker to read arbitrary files in the underlying operating system.

The issue exists in the ArubaOS web-based management interface, where authenticated remote command injection is possible. This allows an attacker to execute arbitrary commands as a privileged user on the underlying operating system, potentially leading to full compromise of the operating system on the device running ArubaOS. The vulnerability is due to the lack of neutralization of special elements used in the operating system command.

The issue exists due to the lack of neutralization of special elements used in operating system commands in the ArubaOS web-based management interface. This allows a remote attacker to execute arbitrary commands as a privileged user on the underlying operating system, potentially fully compromising the device.

The issue is related to an authenticated path traversal vulnerability in the ArubaOS web-based management interface. This vulnerability allows for the deletion of arbitrary files in the underlying operating system. The vulnerability is associated with incorrect restriction of directory path names with limited access.

The issue is related to an improper check for unusual or exceptional conditions in the HTTP request processing function, which could allow an unauthenticated attacker to corrupt the contents of the memory and result in a denial-of-service (DoS) condition on a vulnerable device.

The issue is related to a post-authentication information exposure vulnerability in the CGI program of the affected Zyxel devices. This vulnerability could allow a remote authenticated attacker to retrieve encrypted information of the administrator on an affected device. The vulnerability is associated with inadequate access restrictions to personal information.

The issue is related to a post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices. This could allow an attacker to execute code in the context of the root user on vulnerable CGI files. The vulnerability can only be exploited over the network and requires the attacker to already have admin/root privileges. An authentication bypass is necessary for this exploit, making it more complex. The attack may not require user interaction. Given that an attacker must already be authenticated, the confidentiality impact is low, while the integrity and availability impact is high.

The issue is related to a buffer over-read in BIG-IP when an LTM monitor or APM SSO is configured on a virtual server and NTLM challenge-response is in use. This can cause undisclosed traffic to lead to a buffer over-read, potentially allowing a remote attacker to gain unauthorized access to protected information.

A stack-based buffer overflow vulnerability was found in ASUSTOR Data Master (ADM) when using WebDAV due to the lack of data size validation. An attacker can exploit this vulnerability to run arbitrary code.

The issue is caused by insufficient bounds checking when parsing specific HTTP authentication messages, leading to a heap overflow in the Clientless SSL VPN component of Cisco Adaptive Security Appliance (ASA) Software. This could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device or to obtain portions of process memory from an affected device. The attacker would need to control a web server that can be accessed through the Clientless SSL VPN portal to send malicious traffic to an affected device acting as a VPN Gateway. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition, or to retrieve bytes from the device process memory that may contain sensitive information.

The issue is related to authentication errors in the HPE OneView IT infrastructure management system. Exploitation of this issue may allow an attacker to gain unauthorized access to protected information. A local unauthorized read access to files vulnerability was discovered, which can be resolved with a software update provided by HPE.

A local authentication restriction bypass issue was found, related to weaknesses in the authentication procedure. This could allow an attacker to bypass existing security restrictions. HPE has provided a software update to resolve this issue.

The issue is related to buffer overflow security vulnerabilities in the HPE iLO Amplifier Pack, which could allow a highly privileged user to remotely execute code, leading to a loss of confidentiality, integrity, and availability. The exploitation of this issue may impact the privacy, integrity, and availability of protected information.

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. The estimated number of potentially affected devices worldwide is 242,070, according to Shodan.

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector Controller versions prior to 4.6.358.20210205 Description: The Zone Controller service does not verify the `cnt` field sent in incoming network packets, leading to exhaustion of resources and system crash. Recommendations: For versions prior to 4.6.358.20210205, update to version 4.6.358.20210205 or later to resolve the issue. As a temporary workaround, consider restricting incoming network packets to minimize the risk of exploitation.

The issue is related to the REST API of Cisco Firepower Device Manager On-Box Software, where insufficient sanitization of user input on specific REST API commands could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. An attacker could exploit this by sending a crafted HTTP request to the API subsystem. To exploit, an attacker would need valid low-privileged user credentials.