Qian Chen

The issue allows attackers to deliver security-relevant commands via an audio signal between 16 and 22 kHz, which is often outside the range of human adult hearing. Commands at these frequencies are essentially never spoken by authorized actors, but a substantial fraction of the commands are successful.

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This issue is due to insufficient resource allocation and errors in memory deallocation. An attacker could exploit this by sending crafted LLDP traffic to an affected device, potentially exhausting the memory resources and causing the LLDP process to crash. If the device is configured to support LLDP only, this could interrupt inbound and outbound calling. By default, these devices support both Cisco Discovery Protocol and LLDP.

The issue is related to an out-of-bounds read in Organization Specific TLV found in OpenvSwitch. It can be exploited by sending specially crafted LLDP messages to the vulnerable system, potentially allowing remote attackers to execute arbitrary code. The vulnerability is also associated with an integer overflow when parsing Auto Attach TLV.

The issue is related to an integer underflow in Organization Specific TLV, which can be exploited by sending specially crafted LLDP messages to the vulnerable system, allowing a remote attacker to execute arbitrary code.

A vulnerability in the Cisco Discovery Protocol processing feature could allow an unauthenticated, adjacent attacker to cause a stack overflow on an affected device. This is due to insufficient input validation of received Cisco Discovery Protocol packets. An attacker could exploit this by sending crafted Cisco Discovery Protocol traffic to an affected device, potentially allowing remote code execution or a denial of service (DoS) condition. The vulnerability is caused by insufficient validation of `received Cisco Discovery Protocol packets`.

The issue is related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal', in file operation management. This allows remote attackers to write arbitrary files via unspecified vectors.

The issue is related to improper privilege management in the summary report management of Synology Presto File Server. This allows remote authenticated users to bypass security constraints.

A Server-Side Request Forgery (SSRF) issue in the Package Center functionality allows remote authenticated users to access intranet resources via unspecified vectors. This could potentially lead to unauthorized access to internal resources.

The issue concerns a missing authentication mechanism for a critical function in the iSCSI management functionality. This allows remote attackers to read or write arbitrary files via unspecified vectors.

The issue is related to the implementation of the Cisco Discovery Protocol in the firmware of Cisco Analog Telephone Adapter (ATA) series 190 devices. It is caused by a lack of input data validation, which could allow a remote attacker to impact the integrity of protected information. The vulnerability is due to missing length validation checks when processing Cisco Discovery Protocol messages. An attacker could exploit this by sending a malicious Cisco Discovery Protocol packet to an affected device, potentially causing an out-of-bounds read of valid packet data and leading to corruption in the internal Cisco Discovery Protocol database.

A vulnerability in the Cisco Discovery Protocol functionality could allow an unauthenticated, remote attacker to cause a Denial of Service (DoS) condition on an affected device. This issue is due to an out-of-bounds read when processing Cisco Discovery Protocol packets. An attacker could exploit this by sending crafted packets to an affected device, potentially causing a service restart.

The issue exists due to insufficient input validation in the Cisco Discovery Protocol implementation of the Cisco Analog Telephone Adapter (ATA) series 190 firmware. This could allow a remote attacker to cause a denial of service. The vulnerability is caused by missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit this by sending crafted Cisco Discovery Protocol packets to an affected device, potentially causing the device to exhaust available memory and restart the service.

A vulnerability in the Cisco Discovery Protocol functionality could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the Cisco Discovery Protocol service to restart. This issue is due to missing length validation of certain Cisco Discovery Protocol packet header fields. An attacker could exploit this by sending a malicious Cisco Discovery Protocol packet to an affected device, potentially allowing the attacker to execute code and cause the service to restart unexpectedly, resulting in a denial of service condition.

The issue is related to the Link Layer Discovery Protocol (LLDP) functionality and Cisco Discovery Protocol implementation in the firmware of Cisco Analog Telephone Adapter (ATA) series 190 devices. It is caused by missing length validation of certain LLDP packet header fields and a buffer overflow read in memory. An unauthenticated, remote attacker could exploit this by sending a malicious LLDP packet to an affected device, potentially allowing the execution of arbitrary code on the device and causing the LLDP service to restart unexpectedly. This could result in a denial of service (DoS) condition.

The issue is related to the implementation of the Link Layer Discovery Protocol (LLDP) functionality in the firmware of Cisco Analog Telephone Adapter (ATA) series 190 devices. It is caused by missing length validation of certain LLDP packet header fields. An attacker could exploit this by sending a malicious LLDP packet to an affected device, potentially allowing them to execute arbitrary code on the device and cause the LLDP service to restart, resulting in a denial of service (DoS) condition.

The issue is related to the implementation of the Cisco Discovery Protocol in the firmware of Cisco Analog Telephone Adapter (ATA) devices, series 190. It is caused by a lack of input data validation, which could allow a remote attacker to cause memory corruption and impact the integrity of protected information. The vulnerability is due to missing length validation checks when processing Cisco Discovery Protocol messages. An attacker could exploit this by sending a malicious Cisco Discovery Protocol packet to an affected device, potentially causing an out-of-bounds read of valid packet data and corruption in the device's internal Cisco Discovery Protocol database.

A vulnerability in the Cisco Discovery Protocol implementation could allow an unauthenticated, adjacent attacker to cause the Cisco Discovery Protocol process to reload on an affected device. This issue is due to a heap buffer overflow in certain Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device, potentially causing a heap overflow and leading to the reload of the Cisco Discovery Protocol process. The bytes that can be written in the buffer overflow are restricted, limiting remote code execution. Note that Cisco Discovery Protocol is a Layer 2 protocol, and to exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device.

The issue is related to a Path Traversal vulnerability in the webapi component, allowing remote authenticated users to read arbitrary files via unspecified vectors.

The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability, in the webapi component. This allows remote authenticated users to download arbitrary files via unspecified vectors.

The issue is related to a Path Traversal vulnerability in the webapi component, allowing remote authenticated users to delete arbitrary files via unspecified vectors.