Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

cisco unified communications manager 4.3 1 vulnerabilities and exploits

(subscribe to this query)
5.1
CVSSv2

CVE-2021-45046

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with...
Apache Log4j 2.0Apache Log4jIntel Oneapi -Intel Audio Development Kit -Intel Datacenter Manager -Intel System Debugger -Intel Secure Device Onboard -Intel Sensor Solution Firmware Development Kit -Intel Computer Vision Annotation Tool -Intel Genomics Kernel Library -Intel System Studio -Siemens Sppa-t3000 Ses3000 FirmwareSiemens Logo! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85
9.3
CVSSv2

CVE-2021-44228

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
7.5
CVSSv2

CVE-2015-7705

The rate limiting feature in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77 allows remote malicious users to have unspecified impact via a large number of crafted requests.
Ntp Ntp 4.2.8Ntp NtpNetapp Clustered Data Ontap -Netapp Data Ontap -Netapp Oncommand Unified Manager -Netapp Oncommand Performance Manager -Citrix Xenserver 7.0Citrix Xenserver 6.0.2Citrix Xenserver 6.5Citrix Xenserver 6.2.0Siemens Tim 4r-ie FirmwareSiemens Tim 4r-ie Dnp3 Firmware
6.5
CVSSv2

CVE-2015-7849

Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.
Ntp Ntp 4.2.8Ntp NtpNetapp Oncommand Balance -Netapp Clustered Data Ontap -Netapp Data Ontap -Netapp Oncommand Unified Manager -Netapp Oncommand Performance Manager -
4
CVSSv2

CVE-2015-7850

ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.
Ntp Ntp 4.2.8Ntp NtpDebian Debian Linux 8.0Debian Debian Linux 7.0Debian Debian Linux 9.0Netapp Oncommand Balance -Netapp Clustered Data Ontap -Netapp Data Ontap -Netapp Oncommand Unified Manager -Netapp Oncommand Performance Manager -
6.5
CVSSv2

CVE-2015-7854

Buffer overflow in the password management functionality in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.
Ntp Ntp 4.2.8Ntp NtpNetapp Oncommand Balance -Netapp Clustered Data Ontap -Netapp Data Ontap -Netapp Oncommand Unified Manager -Netapp Oncommand Performance Manager -
4
CVSSv2

CVE-2015-7855

The decodenetnum function in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.
Ntp Ntp 4.2.8Ntp NtpDebian Debian Linux 8.0Debian Debian Linux 7.0Debian Debian Linux 9.0Netapp Oncommand Balance -Netapp Clustered Data Ontap -Netapp Data Ontap -Netapp Oncommand Unified Manager -Netapp Oncommand Performance Manager -Siemens Tim 4r-ie FirmwareSiemens Tim 4r-ie Dnp3 Firmware
7.5
CVSSv2

CVE-2015-7871

Crypto-NAK packets in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to bypass authentication.
Ntp Ntp 4.2.5Ntp Ntp 4.2.8Ntp NtpDebian Debian Linux 8.0Debian Debian Linux 7.0Debian Debian Linux 9.0Netapp Oncommand Balance -Netapp Clustered Data Ontap -Netapp Data Ontap -Netapp Oncommand Unified Manager -Netapp Oncommand Performance Manager -
7.5
CVSSv2

CVE-2015-7853

The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.
Ntp Ntp 4.2.8Ntp NtpNetapp Oncommand Balance -Netapp Clustered Data Ontap -Netapp Data Ontap -Netapp Oncommand Unified Manager -Netapp Oncommand Performance Manager -
5.8
CVSSv2

CVE-2015-7973

NTP prior to 4.2.8p6 and 4.3.x prior to 4.3.90, when configured in broadcast mode, allows man-in-the-middle malicious users to conduct replay attacks by sniffing the network.
Ntp Ntp 4.2.8Ntp NtpSiemens Tim 4r-ie FirmwareSiemens Tim 4r-ie Dnp3 FirmwareFreebsd Freebsd 9.3Freebsd Freebsd 10.2Freebsd Freebsd 10.1Freebsd FreebsdNetapp Oncommand Balance -Netapp Clustered Data Ontap -Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-0044client sideCVE-2021-47601deserializationCVE-2024-34994encryptionCVE-2021-47609CVE-2024-37079CVE-2024-38608
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook