cisco video surveillance manager 6.3.1 vulnerabilities and exploits

(subscribe to this query)

Cisco Video Surveillance Manager (VSM) prior to 7.0.0 allows remote malicious users to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37288.

Cisco Video Surveillance Manager 2.1.2 Cisco Video Surveillance Manager 2.1.6 Cisco Video Surveillance Manager 4.0.1 Cisco Video Surveillance Manager 4.2.0 Cisco Video Surveillance Manager 6.3 Cisco Video Surveillance Manager 1.2.1 Cisco Video Surveillance Manager 4.2.1 Cisco Video Surveillance Manager 2.1.4 Cisco Video Surveillance Manager 2.0.0 Cisco Video Surveillance Manager 6.3.1 Cisco Video Surveillance Manager 6.3.2 Cisco Video Surveillance Manager 2.1.7 Cisco Video Surveillance Manager 2.3.0 Cisco Video Surveillance Manager 1.1.0 Cisco Video Surveillance Manager 2.1.3 Cisco Video Surveillance Manager 2.1 Cisco Video Surveillance Manager 2.3.1 Cisco Video Surveillance Manager

1 EDB exploit

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) prior to 7.0.0 allow remote malicious users to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.

Cisco Video Surveillance Manager 2.0.0 Cisco Video Surveillance Manager 2.1.7 Cisco Video Surveillance Manager 6.3.2 Cisco Video Surveillance Manager 1.1.0 Cisco Video Surveillance Manager 2.3.0 Cisco Video Surveillance Manager 2.1 Cisco Video Surveillance Manager Cisco Video Surveillance Manager 2.1.3 Cisco Video Surveillance Manager 2.1.2 Cisco Video Surveillance Manager 2.3.1 Cisco Video Surveillance Manager 4.0.1 Cisco Video Surveillance Manager 1.2.1 Cisco Video Surveillance Manager 2.1.6 Cisco Video Surveillance Manager 2.1.4 Cisco Video Surveillance Manager 4.2.0 Cisco Video Surveillance Manager 6.3 Cisco Video Surveillance Manager 6.3.1 Cisco Video Surveillance Manager 4.2.1

1 EDB exploit

Cisco Video Surveillance Manager (VSM) prior to 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote malicious users to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka ...

Cisco Video Surveillance Manager 2.1.6 Cisco Video Surveillance Manager 2.1.4 Cisco Video Surveillance Manager 6.3 Cisco Video Surveillance Manager 1.1.0 Cisco Video Surveillance Manager 2.3.0 Cisco Video Surveillance Manager 2.1 Cisco Video Surveillance Manager 2.3.1 Cisco Video Surveillance Manager 6.3.2 Cisco Video Surveillance Manager Cisco Video Surveillance Manager 2.1.3 Cisco Video Surveillance Manager 2.1.2 Cisco Video Surveillance Manager 4.0.1 Cisco Video Surveillance Manager 4.2.0 Cisco Video Surveillance Manager 1.2.1 Cisco Video Surveillance Manager 6.3.1 Cisco Video Surveillance Manager 4.2.1 Cisco Video Surveillance Manager 2.0.0 Cisco Video Surveillance Manager 2.1.7

1 EDB exploit

NTP prior to 4.2.8p6 and 4.3.x prior to 4.3.90, when configured in broadcast mode, allows man-in-the-middle malicious users to conduct replay attacks by sniffing the network.

Ntp Ntp Ntp Ntp 4.2.8 Siemens Tim 4r-ie Firmware Siemens Tim 4r-ie Dnp3 Firmware Freebsd Freebsd 9.3 Freebsd Freebsd Freebsd Freebsd 10.1 Freebsd Freebsd 10.2 Netapp Clustered Data Ontap -Netapp Oncommand Balance -Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04

The ntpq protocol in NTP prior to 4.2.8p7 allows remote malicious users to conduct replay attacks by sniffing the network.

In OpenSSL 1.1.0 prior to 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.

Openssl Openssl 1.1.0c Openssl Openssl 1.1.0 Openssl Openssl 1.1.0b Openssl Openssl 1.1.0a Oracle Agile Engineering Data Management 6.2.0 Oracle Jd Edwards World Security A9.2 Oracle Communications Eagle Lnp Application Processor 10.1 Oracle Communications Application Session Controller 3.7.1 Oracle Jd Edwards World Security A9.4 Oracle Jd Edwards Enterpriseone Tools 9.2 Oracle Communications Operations Monitor 3.4 Oracle Communications Operations Monitor 4.0 Oracle Agile Engineering Data Management 6.1.3 Oracle Jd Edwards World Security A9.1 Oracle Jd Edwards World Security A9.3 Oracle Communications Eagle Lnp Application Processor 10.0 Oracle Communications Eagle Lnp Application Processor 10.2 Oracle Communications Application Session Controller 3.8.0

1 EDB exploit1 Github repository1 Article

During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 prior to 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.

Openssl Openssl 1.1.0 Openssl Openssl 1.1.0c Openssl Openssl 1.1.0d Openssl Openssl 1.1.0a Openssl Openssl 1.1.0b Hp Operations Agent 11.15 Hp Operations Agent 11.14

1 Github repository

ntpq in NTP prior to 4.2.8p7 allows remote malicious users to obtain origin timestamps and then impersonate peers via unspecified vectors.

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d

1 Article

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook