CVE Vulnerability Catalog

A vulnerability in the MPLS OAM feature of Cisco NX-OS Software for Nexus 3000 and 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a DoS condition. It is due to improper validation of MPLS echo-request packets.

The Cisco networking engineering team discovered vulnerabilities related to buffer management (CWE-119) during an internal security review. They were addressed in a hardening release.

A vulnerability found during Cisco's internal security review concerns improper access control (CWE-284). It is addressed in a software hardening release.

A vulnerability in Cisco NX-OS discovered during internal security review concerns out-of-bounds write (CWE-787). It is fixed in a software hardening release.

A vulnerability in Cisco NX-OS found during security review concerns improper handling of exceptional conditions (CWE-703). It is addressed in a software hardening release.

A vulnerability in Cisco NX-OS discovered during internal security review concerns out-of-bounds read (CWE-125). It is fixed in a software hardening release.

A vulnerability in Cisco NX-OS discovered during security review concerns improper input validation of special elements in a command (CWE-20). It is addressed in a software hardening release.

The Cisco NX-OS team discovered vulnerabilities related to improper access control (CWE-284) during an internal security review. They were addressed in a hardening release.

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem (formerly SSM On-Prem) could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition. It is due to improper input validation and lack of authentication in the management API.

A vulnerability in Cisco NX-OS discovered during internal security review concerns improper neutralization (CWE-707). It is fixed in a software hardening release.

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. The vulnerability is due to insufficient validation of user-supplied input. Exploitation requires valid administrative user credentials.

A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to improper validation of user-supplied content within configurations submitted to the web-based management interface. Exploitation requires valid administrative credentials.

Homer, open source telecom observability software, prior to version 11.0.283 has a vulnerability where JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` when `jwtSecret` is empty. The JWT secret defaults to an empty string, leaving all protected API endpoints completely unauthenticated.

Homer prior to version 11.0.283, on every fresh deployment using internal authentication, automatically creates an `admin` account with the password `sipcapture` (stored as a legacy SHA-256 hex hash). There is no first-login forced-change mechanism, allowing any attacker to gain full administrative access.

Homer, open source telecom observability software, before version 11.0.283 is vulnerable to SQL injection in the V4StatisticsQuery handler. The user-supplied rawquery field is passed directly to DuckDB without calling sqlvalidator.ValidateRawSQL, allowing any authenticated user to execute arbitrary SQL statements against all data accessible via the FlightSQL service.

PraisonAI prior to version 4.6.78 has a vulnerability in the `deploy/api.py` module that generates Python server code by directly interpolating the `agents_file` parameter into an f-string, which is then written to a file and executed via `subprocess.Popen()`. An attacker who controls the `agents_file` value can inject arbitrary Python code.

A vulnerability in the web-based management interface of Cisco Finesse is due to improper input validation for specific HTTP requests. An unauthenticated, remote attacker could send a crafted HTTP request to conduct server-side request forgery (SSRF) attacks. A successful exploit could allow the attacker to obtain limited sensitive information for services associated with the affected device.

A vulnerability in the web-based management interface of Cisco License On-Prem (formerly SSM On-Prem) could allow an unauthenticated, remote attacker to gain unauthorized access to the application. It is due to improper checks during the password reset process.

A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. The vulnerability is due to insufficient input validation of user-controlled command arguments. Exploitation requires valid administrative credentials.

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. The issue exists because rate limiting was improperly applied to some protocols. An attacker could exploit this by sending a high rate of UDP or TCP connections to a data plane interface, leading to instability in routing and control plane protocols.