CVE Vulnerability Catalog

A Remote Code Execution (RCE) vulnerability exists in Ruijie RG-EW Series Routers running ReyeeOS up to version 1.55.1915 / EW_3.0(1)B11P55 via the setSessionTime function in /cgi-bin/luci/api/common. An attacker can send a crafted request to execute arbitrary code on the device.

A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. It is due to improper handling of the DNS reputation enforcement rule. An attacker could exploit this by sending crafted UDP packets through the device to force a buildup of UDP connections. This only affects FTD devices running Snort 3.

A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. It is due to a lack of proper processing of incoming requests. An attacker could exploit this by sending crafted DNS requests at a high rate to an affected device.

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, but unprivileged, remote attacker to elevate privileges to level 15. This vulnerability is due to improper separation of authentication and authorization scopes. An attacker could exploit this vulnerability by sending crafted HTTPS messages to the web services interface of an affected device. A successful exploit could allow the attacker to gain privilege level 15 access to the web management interface of the device, including via tools like ASDM or CSM. For FTD, the impact is lower because the management interface allows read-only access.

A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This is due to improper traffic handling when platform limits are reached. An attacker could exploit this by sending a high rate of UDP traffic, causing all new incoming connections to be dropped.

A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, leading to DoS. It is due to insufficient memory management for certain Snort events. An attacker can send crafted IP packets to generate specific Snort events, causing out-of-memory and traffic interruption; in some cases, device reload may occur.

A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The issue is due to insufficient error handling. An attacker could send a crafted file through the device, causing the analysis process to crash and resulting in DoS. Manual intervention may be required.

A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This is due to improper handling of TCP flows. An attacker could exploit this by sending a crafted stream of TCP traffic, causing the device to reload.

A vulnerability in the web services interface for remote access VPN features of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS). The issue is due to improper input validation when parsing HTTPS requests. Exploitation involves sending a crafted HTTPS request.

A vulnerability in an IPsec VPN library of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. The issue is due to an improper implementation of Galois/Counter Mode (GCM) ciphers. An attacker in a man-in-the-middle position could intercept a sufficient number of encrypted messages and break the encryption, allowing decryption, reading, modification, and re-encryption of data.

A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This is due to incorrect feed update processing. An attacker could send traffic through an affected device that should be blocked, to bypass device controls and send traffic to protected systems.

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject XML into the command parser. This is due to insufficient input validation. Successful exploitation could result in unexpected processing of commands and unexpected output.

A vulnerability in the remote access SSL VPN features of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This is due to improper validation of logged errors from client connections. An attacker could exploit this by sending crafted requests, causing the device to restart.

A vulnerability in SiteServer CMS version 7.x allows attackers to execute arbitrary code via a crafted plug-in. The flaw stems from insufficient security checks on plug-ins loaded into the system.

Cyclos 4 PRO version 4.14.7 and earlier does not validate user input in error messages, allowing a remote unauthenticated attacker to execute JavaScript code via an undefined enum constant.

A DOM-based Cross-site Scripting (XSS) vulnerability in the account registration process in Cyclos 4 PRO version 14.7 and earlier. A remote attacker can inject arbitrary web script or HTML via the groupId parameter.

The package com.google.code.gson:gson before version 2.8.9 is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.

A vulnerability in Wondershare Dr. Fone (version as of 2021-12-06) allows remote code execution. An unauthenticated user can communicate over UDP with the InstallAssistService.exe service (running with SYSTEM privileges) and manipulate it to execute a malicious executable without any validation, gaining SYSTEM privileges.

A vulnerability in Wondershare Dr. Fone (latest version as of 2021-12-06) is due to incorrect access control. A normal user can send manually crafted packets to the ElevationService.exe process and execute arbitrary code without validation, with SYSTEM privileges.