A vulnerability in the web-based management interface of Cisco Small Business RV110W RV130 RV130W and RV215W Series Routers could allow an authenticated remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary shell commands or scripts with root privileges on the affected device.


A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated local attacker to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain administrative privileges.


A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send incorrect information to the system log on the affected system.


A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI utility. The attacker must be authenticated to access the CLI utility. A successful exploit could allow the attacker to execute commands with root privileges.


A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an authenticated remote attacker to overwrite files on the file system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted file to the web UI on an affected device. A successful exploit could allow the attacker to overwrite files on the file system of the affected device.


A vulnerability in Cisco SD-WAN Software could allow an authenticated local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted options to a specific command. A successful exploit could allow the attacker to gain root privileges.


A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated remote attacker to bypass URL filtering on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted malicious HTTP request to an affected device. A successful exploit could allow the attacker to redirect users to malicious sites.


A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to bypass the URL reputation filters on an affected device. The vulnerability is due to insufficient input validation of URLs. An attacker could exploit this vulnerability by crafting the URL in a particular way. A successful exploit could allow the attacker to bypass the URL reputation filters that are configured for the affected device which could allow malicious URLs to pass through the device.


A vulnerability in the Common Open Policy Service (COPS) engine of Cisco IOS XE Software on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated remote attacker to crash a device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a malformed COPS message to the device. A successful exploit could allow the attacker to crash the device.


Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65 11.11.65 11.22.65 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access.

insufficient input validation
denial of service


Insufficient input validation in KMD module for Intel(R) Graphics Driver before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable denial of service via local access.


Insufficient input validation in system firmware for Intel(R) Broadwell U i5 vPro before version MYBDWi5v.86A may allow an authenticated user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.

insufficient input validation
information disclosure


Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70 11.11.70 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.

insufficient input validation
weak authentication management


Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70 11.11.70 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.


Insufficient input validation in system firmware for Intel NUC7i3BNK NUC7i3BNH NUC7i5BNK NUC7i5BNH NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.

insufficient input validation
arbitrary code execution


Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60 11.11.60 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.


Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60 11.11.60 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.


A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated remote attacker to execute arbitrary code on the underlying operating system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending malicious commands to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device.


A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to insufficient input validation during the initial High Availability (HA) configuration and registration process of an affected device. An attacker could exploit this vulnerability by uploading a malicious file during the HA registration period. A successful exploit could allow the attacker to execute arbitrary code with root-level privileges on the underlying operating system. Note: This vulnerability can only be exploited during the HA registration period. See the Details section for more information.


Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example a tape head may have an unexpected location after the processing of input composed of As and Bs (instead of 0s and 1s). NOTE: the discoverer states \this vulnerability has no real-world implications.\


CA Harvest Software Change Manager versions 13.0.3 13.0.4 14.0.0 and 14.0.1 contain a vulnerability in the CSV export functionality due to insufficient input validation that can allow a privileged user to potentially execute arbitrary code or commands.


A vulnerability in the CLI of Cisco StarOS could allow an authenticated local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the root user. To exploit this vulnerability an attacker would need to have valid administrative credentials on an affected device.


A vulnerability in Sierra Wireless AirLink GX400 GX440 ES440 and LS300 routers with firmware before 4.4.5 and GX450 ES450 RV50 RV50X MP70 and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected system including issuing commands with root privileges. This vulnerability is due to insufficient input validation on user-controlled input in an HTTP request to the targeted device. An attacker in possession of router login credentials could exploit this vulnerability by sending a crafted HTTP request to an affected system.


Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059) 10.18.x.5057 (aka 15.36.x.5057) 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access via local access.


A vulnerability in Cisco WebEx Business Suite clients Cisco WebEx Meetings and Cisco WebEx Meetings Server could allow an authenticated remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient input validation by the Cisco WebEx clients. An attacker could exploit this vulnerability by providing meeting attendees with a malicious Flash (.swf) file via the file-sharing capabilities of the client. Exploitation of this vulnerability could allow arbitrary code execution on the system of a targeted user. This affects the clients installed by customers when accessing a WebEx meeting. The following client builds of Cisco WebEx Business Suite (WBS30 WBS31 and WBS32) Cisco WebEx Meetings and Cisco WebEx Meetings Server are impacted: Cisco WebEx Business Suite (WBS31) client builds prior to T31.23.2 Cisco WebEx Business Suite (WBS32) client builds prior to T32.10 Cisco WebEx Meetings with client builds prior to T32.10 Cisco WebEx Meetings Server builds prior to 2.8 MR2. Cisco Bug IDs: CSCvg19384 CSCvi10746.


Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.


A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated local attacker to elevate privileges on an affected device. The vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the root user on the affected device. To exploit this vulnerability an attacker would need to have valid credentials on an affected device and know the password for the cli test-commands command.


A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated local attacker to elevate privileges on an affected device. The vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the root user. To exploit this vulnerability an attacker would need to have valid administrative credentials on an affected device.


A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to execute arbitrary commands within the affected device.

insufficient input validation
arbitrary command execution


A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for certain fields in the affected solution. An attacker could exploit this vulnerability by configuring a malicious username on the login page of the affected solution. A successful exploit could allow the attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system.


A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating as the remote support user and submitting malicious input to a specific command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system (OS) with root privileges.


A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated remote attacker to inject arbitrary commands that can be executed as the root user. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to the web UI of an affected device with arbitrary commands injected into a portion of the request. A successful exploit could allow the attacker to execute arbitrary commands as the root user.


A vulnerability in the CLI of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient input validation of commands that are supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input for specific commands. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges. To exploit this vulnerability an attacker must have valid administrator-level credentials.


A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the system CLI. A successful exploit could allow the attacker to execute commands on the underlying operating system with root privileges.


XCOM Data Transport for Windows Linux and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges.


A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS XE Software could allow an authenticated local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl interpreter. An attacker could exploit this vulnerability by loading malicious Tcl code on an affected device. A successful exploit could allow the attacker to execute arbitrary commands as root. By default Tcl shell access requires privilege level 15.


A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP POST request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system. Note: The NX-API feature is disabled by default.


A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability is due to insufficient input validation of certain Smart Licensing configuration parameters. An authenticated attacker could exploit the vulnerability by configuring a malicious URL within the affected feature. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. This vulnerability affects the following Cisco Firepower Security products running FX-OS code trains 1.1.3 1.1.4 and 2.0.1 (versions 2.1.1 2.2.1 and 2.2.2 are not affected): Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance. Cisco Bug IDs: CSCvb86863.


A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated local attacker to escape the interactive TCL shell and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient input validation of user-supplied files passed to the interactive TCL shell of the affected device. An attacker could exploit this vulnerability to escape the scripting sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. To exploit this vulnerability an attacker must have local access and be authenticated to the targeted device with administrative or tclsh execution privileges. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches Nexus 2000 Series Fabric Extenders Nexus 3000 Series Switches Nexus 3500 Platform Switches Nexus 5000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 7700 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode Nexus 9500 R-Series Line Cards and Fabric Modules Unified Computing System Manager. Cisco Bug IDs: CSCve93750 CSCve93762 CSCve93763 CSCvg04127.


A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated remote attacker to execute arbitrary shell commands with the privileges of the root user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting malicious arguments into vulnerable commands. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the affected system. This vulnerability affects the following releases of Cisco Network Services Orchestrator (NSO): 4.1 through 4.1.6.0 4.2 through 4.2.4.0 4.3 through 4.3.3.0 4.4 through 4.4.2.0. Cisco Bug IDs: CSCvf99982.


A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting malicious command arguments into a vulnerable CLI command. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the affected device. Note: This vulnerability requires that any feature license is uploaded to the device. The vulnerability does not require that the license be used. This vulnerability affects MDS 9000 Series Multilayer Switches Nexus 1000V Series Switches Nexus 1100 Series Cloud Services Platforms Nexus 2000 Series Fabric Extenders Nexus 3000 Series Switches Nexus 3500 Platform Switches Nexus 3600 Platform Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 7700 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve51693 CSCve91634 CSCve91659 CSCve91663.


A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for certain fields in the affected solution. An attacker could exploit this vulnerability by configuring a malicious username on the login page of the affected solution. A successful exploit could allow the attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. This vulnerability affects the following Cisco products if they are running a release of the Cisco SD-WAN Solution prior to Release 18.3.0: vBond Orchestrator Software vEdge 100 Series Routers vEdge 1000 Series Routers vEdge 2000 Series Routers vEdge 5000 Series Routers vEdge Cloud Router Platform vManage Network Management Software vSmart Controller Software. Cisco Bug IDs: CSCvi69974.


A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting malicious command arguments into a vulnerable CLI command. A successful exploit could allow the attacker authenticated as a privileged user to execute arbitrary commands with root privileges. Note: On products that support multiple virtual device contexts (VDC) this vulnerability could allow an attacker to access files from any VDC. This vulnerability affects Nexus 2000 Series Fabric Extenders Nexus 3000 Series Switches Nexus 3500 Platform Switches Nexus 3600 Platform Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 7700 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve51704 CSCve91749 CSCve91768.


A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated remote attacker to inject arbitrary commands that could be executed with root privileges on the underlying operating system (OS). The vulnerability is due to insufficient input validation of specific Call Home configuration parameters when the software is configured for transport method HTTP. An attacker could exploit this vulnerability by modifying parameters within the Call Home configuration on an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying OS.


A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated local attacker to execute arbitrary commands on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted arguments to specific commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS with the privileges of the currently logged-in user for all affected platforms excluding Cisco UCS 6400 Series Fabric Interconnects. On Cisco UCS 6400 Series Fabric Interconnects the injected commands are executed with root privileges.


A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated local attacker to execute arbitrary commands on the underlying operating system (OS) on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by including crafted arguments to specific commands on the local management CLI. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS with the privileges of the currently logged-in user for all affected platforms excluding Cisco UCS 6400 Series Fabric Interconnects. On Cisco UCS 6400 Series Fabric Interconnects the injected commands are executed with root privileges.


A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated remote attacker to inject arbitrary code and execute arbitrary commands at the underlying operating system level. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to inject and execute arbitrary commands at the underlying operating system level.


A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted arguments to specific commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS with the privileges of the currently logged-in user for all affected platforms excluding Cisco UCS 6400 Series Fabric Interconnects. On Cisco UCS 6400 Series Fabric Interconnects the injected commands are executed with root privileges.


Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated remote attacker to conduct a path traversal or command injection attack on an affected system. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by using the web-based management interface to do one or both of the following: Execute a command using crafted input Upload a file that has been altered using path traversal techniques A successful exploit could allow the attacker to read and write arbitrary files or execute arbitrary commands as root on an affected system. For more information about these vulnerabilities see the Details section of this advisory.

insufficient input validation
arbitrary command execution
command injection


A vulnerability in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated remote attacker to perform a command injection attack on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using the web-based management interface to execute a command using crafted input. A successful exploit could allow the attacker to execute arbitrary commands using root-level privileges on an affected device.


A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated local attacker to perform a command injection attack. An attacker would need valid administrator credentials to perform this exploit. The vulnerability is due to insufficient input validation during the installation of a software patch. An attacker could exploit this vulnerability by installing a crafted patch image with the vulnerable operation occurring prior to patch activation. An exploit could allow the attacker to execute arbitrary commands on an affected system as root. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches Nexus 2000 Series Fabric Extenders Nexus 5000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 7700 Series Switches Unified Computing System Manager. Cisco Bug IDs: CSCvf23735 CSCvg04072.


A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated local attacker to perform a command injection attack. An attacker would need valid administrator credentials to perform this exploit. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to execute arbitrary commands as root. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches Nexus 2000 Series Fabric Extenders Nexus 3000 Series Switches Nexus 3500 Platform Switches Nexus 5000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 7700 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode Nexus 9500 R-Series Line Cards and Fabric Modules Unified Computing System Manager. Cisco Bug IDs: CSCvf15113 CSCvf15122 CSCvf15125 CSCvf15131 CSCvf15143 CSCvg04088.


A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated local attacker to execute arbitrary commands aka Debug Shell Command Injection. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting additional command input to the affected parameter in the debug shell. Cisco Bug IDs: CSCvf80034.


A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command and gaining unauthorized access to the underlying operating system of the device. An exploit could allow the attacker to execute arbitrary commands at the user's privilege level. On products that support multiple virtual device contexts (VDCs) this vulnerability could allow an attacker to execute commands at the user's privilege level outside the user's environment. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches Nexus 2000 Series Fabric Extenders Nexus 3000 Series Switches Nexus 5000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 7700 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve99902 CSCvf14879.


A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command and gain unauthorized access to the underlying operating system of the device. An exploit could allow the attacker to execute arbitrary commands at the user's privilege level. On products that support multiple virtual device contexts (VDCs) this vulnerability could allow an attacker to execute commands at the user's privilege level outside the user's environment. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches Nexus 2000 Series Fabric Extenders Nexus 3000 Series Switches Nexus 5000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 7700 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode Nexus 9500 R-Series Line Cards and Fabric Modules Unified Computing System Manager. Cisco Bug IDs: CSCvf14923 CSCvf14926 CSCvg04095.


A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to execute arbitrary commands at the user's privilege level. On products that support multiple virtual device contexts (VDCs) this vulnerability could allow the attacker to execute commands at the user's privilege level outside the user's environment. This vulnerability affects the following products running Cisco FXOS or NX-OS System Software: Firepower 4100 Series Next-Generation Firewall Firepower 9300 Security Appliance Multilayer Director Switches Nexus 1000V Series Switches Nexus 2000 Series Fabric Extenders Nexus 3000 Series Switches Nexus 3500 Platform Switches Nexus 5000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 7700 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode Nexus 9500 R-Series Line Cards and Fabric Modules Unified Computing System Manager. Cisco Bug IDs: CSCve51700 CSCve93833 CSCve93860 CSCve93863 CSCve93864 CSCve93880.


A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to execute arbitrary commands at the user's privilege level. On products that support multiple virtual device contexts (VDCs) this vulnerability could allow the attacker to execute commands at the user's privilege level outside the user's environment. This vulnerability affects the following products running Cisco NX-OS System Software: Multilayer Director Switches Nexus 2000 Series Fabric Extenders Nexus 3000 Series Switches Nexus 5000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 7700 Series Switches Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode Nexus 9000 Series Switches in standalone NX-OS mode and Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve99925 CSCvf15164 CSCvf15167 CSCvf15170 CSCvf15173.


A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated high-privileged local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters in the CLI parser. An attacker could exploit this vulnerability by invoking a vulnerable CLI command with crafted malicious parameters. An exploit could allow the attacker to execute arbitrary commands with a non-root user account on the underlying Linux operating system of the affected device. Cisco Bug IDs: CSCvi09723.


A vulnerability in certain CLI commands of Cisco Identity Services Engine (ISE) could allow an authenticated local attacker to execute arbitrary commands on the host operating system with the privileges of the local user aka Command Injection. These commands should have been restricted from this user. The vulnerability is due to insufficient input validation of CLI command user input. An attacker could exploit this vulnerability by authenticating to the targeted device and issuing a CLI command with crafted user input. A successful exploit could allow the attacker to execute arbitrary commands on the affected system that should be restricted. The attacker would need to have valid user credentials for the device. Cisco Bug IDs: CSCvf49844.


Huawei

have

a

buffer

overflow

vulnerability.

An

attacker

may

send

specially

crafted

HTTP

messages

to

the

affected

products.

Due

insufficient

input

validation

of

three

different

parameters

in

the

messages

successful

exploit

may

cause

some

service

abnormal.

insufficient input validation
buffer overflow


The

Common

Open

Policy

Service

Protocol

(COPS)

module

in

Huawei

IPS

Module

NGFW

Module

Secospace

Secospace

Secospace

haa

a

buffer

overflow

vulnerability.

An

unauthenticated

remote

attacker

could

exploit

this

vulnerability

by

sending

specially

crafted

message

to

the

affected

products.

The

vulnerability

is

due

to

insufficient

input

validation

of

the

message

which

could

result

in

a

buffer

overflow.

Successful

exploit

may

cause

some

services

abnormal.


Huawei

have

a

buffer

overflow

vulnerability.

An

attacker

may

send

specially

crafted

HTTP

messages

to

the

affected

products.

Due

insufficient

input

validation

of

three

different

parameters

in

the

messages

successful

exploit

may

cause

some

service

abnormal.


Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring causing buffer overflow. Successful exploit may cause code execution.


Common

Open

Policy

Service

Protocol

(COPS)

module

in

Huawei

Secospace

Secospace

has

a

buffer

overflow

vulnerability.

An

unauthenticated

remote

attacker

has

to

control

the

peer

device

and

send

specially

crafted

message

to

the

affected

products.

Due

to

insufficient

input

validation

successful

exploit

may

cause

some

services

abnormal.


SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00 RP200 V500R002C00 V600R006C00 TE30 V100R001C10 V500R002C00 V600R006C00 TE40 V500R002C00 V600R006C00 TE50 V500R002C00 V600R006C00 TE60 V100R001C10 V500R002C00 V600R006C00 has a buffer overflow vulnerability. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation successful exploit may cause some service abnormal.


Huawei

have

an

out-of-bound

write

vulnerability.

Due

to

insufficient

input

validation

a

remote

unauthenticated

attacker

may

craft

encryption

key

to

the

affected

products.

Successful

exploit

may

cause

buffer

overflow

services

abnormal.


Huawei

MAX

PRESENCE

have

a

buffer

overflow

vulnerability.

An

authenticated

local

attacker

may

craft

a

specific

XML

file

to

the

affected

products.

Due

to

insufficient

input

validation

successful

exploit

will

cause

some

service

abnormal.


Huawei

have

an

out-of-bound

read

vulnerability

in

some

Huawei

products.

Due

to

insufficient

input

validation

a

remote

unauthenticated

attacker

may

send

crafted

signature

to

the

affected

products.

Successful

exploit

may

cause

buffer

overflow

services

abnormal.


A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due to the insufficient input validation successful exploit can corrupt memory and lead to arbitrary code execution or crash the process.


HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation an unauthenticated attacker may craft Bluetooth messages after successful paring causing buffer overflow. Successful exploit may cause code execution.


A vulnerability in Cisco SD-WAN Solution software could allow an authenticated local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to information that they are not authorized to access and make changes to the system that they are not authorized to make.


A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.


A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to information that they are not authorized to access make changes to the system that they are not authorized to make and execute commands on an affected system with privileges of the root user.


A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated remote attacker to bypass authentication to the REST API of the web UI of the affected software. The vulnerability is due to insufficient input validation for the REST API of the affected software. An attacker could exploit this vulnerability by sending a malicious API request to an affected device. A successful exploit could allow the attacker to bypass authentication and gain access to the web UI of the affected software. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software if the HTTP Server feature is enabled for the device. The newly redesigned web-based administration UI was introduced in the Denali 16.2 Release of Cisco IOS XE Software. This vulnerability does not affect the web-based administration UI in earlier releases of Cisco IOS XE Software. Cisco Bug IDs: CSCuz46036.

insufficient input validation
bypass authentication


antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and password parameters as demonstrated by a username=>&password=%0a string to the /login URI. This allows obtaining root permissions within the web management console because the login process uses Java's ProcessBuilder class and a bash script called antsle-auth with insufficient input validation.


Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.

insufficient input validation
command injection


A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated local attacker to perform command injections. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating as an administrative level user within the restricted shell and submitting malicious input to a specific command. A successful exploit could allow the attacker to execute previously staged code from the underlying filesystem.


A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the Command Runner tool. An attacker could exploit this vulnerability by providing crafted input during command execution or via a crafted command runner API call. A successful exploit could allow the attacker to execute arbitrary CLI commands on devices managed by Cisco DNA Center.


In GenieACS 1.2.x before 1.2.8 the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts). The vulnerability arises from insufficient input validation combined with a missing authorization check.


FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.


A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into the Telnet CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86771.


A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command. An exploit could allow the attacker to read or write arbitrary files at the user's privilege level outside of the user's path. Cisco Bug IDs: CSCvb86787 CSCve60516 CSCve60555.


The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands.


The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to the insufficient input validation on one port an authenticated local attacker may exploit the vulnerability to gain root privileges by sending message with malicious commands.


A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an authenticated remote attacker to perform command injection. The vulnerability is due to insufficient input validation of command input. An attacker could exploit this vulnerability by sending customized commands to the web-based management interface.


A vulnerability in the web management GUI of the Cisco D9800 Network Transport Receiver could allow an authenticated remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of GUI command arguments. An attacker could exploit this vulnerability by injecting crafted arguments into a vulnerable GUI command. An exploit could allow the attacker to execute commands on the underlying BusyBox operating system. These commands are run at the privilege level of the authenticated user. The attacker needs valid device credentials for this attack. Cisco Bug IDs: CSCvg74691.


A vulnerability in the web-based UI of Cisco IP Phone 6800 7800 and 8800 Series with Multiplatform Firmware before 11.2(1) could allow an authenticated remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including arbitrary shell commands in a specific user input field. Cisco Bug IDs: CSCvi51426.


A vulnerability in the ExtCommon.dll user extension module version 9.2 9.2.1 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause arbitrary command to execute.


B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters the attacker can exploit this vulnerability to inject commands to the target device.


Some Huawei products have a command injection vulnerability. Due to insufficient input validation an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300 versions V500R001C30 V500R001C60;NIP6600 versions V500R001C30 V500R001C60;Secospace USG6300 versions V500R001C30 V500R001C60;Secospace USG6500 versions V500R001C30 V500R001C60;Secospace USG6600 versions V500R001C30 V500R001C60;USG9500 versions V500R001C30 V500R001C60.


ManageOne versions 6.5.1.1.B010 6.5.1.1.B020 6.5.1.1.B030 6.5.1.1.B040 6.5.1.1.B050 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation of some parameters the attacker can exploit this vulnerability to inject commands to the target device.


Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation the device's web management interface allows attackers to inject specific code and execute system commands without privilege.


GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.


A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated local attacker with root shell access to the underlying operating system (OS) to conduct a command injection attack during device boot. This vulnerability is due to insufficient input validation checks while processing boot options. An attacker could exploit this vulnerability by modifying device boot options to execute attacker-provided code. A successful exploit may allow an attacker to bypass the Secure Boot process and execute malicious code on an affected device with root-level privileges.


A vulnerability in the REST API of Cisco Identity Services Engine (ISE) could allow an unauthenticated remote attacker to perform a command injection attack and elevate privileges to root. This vulnerability is due to insufficient input validation for specific API endpoints. An attacker in a man-in-the-middle position could exploit this vulnerability by intercepting and modifying specific internode communications from one ISE persona to another ISE persona. A successful exploit could allow the attacker to run arbitrary commands with root privileges on the underlying operating system. To exploit this vulnerability the attacker would need to decrypt HTTPS traffic between two ISE personas that are located on separate nodes.

insufficient input validation
command injection
man in the middle


Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated user to potentially enable denial of service via local access.


Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially enable denial of service via local access.


Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable denial of service via network access.


Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service.


Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.


Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.


Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60 11.11.60 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access.


Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access.


Insufficient input validation in the firmware for Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to potentially enable denial of service via local access.


Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.


Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access.


Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.


Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability. Successful exploit may cause an infinite loop and the device to reboot.


There

are

two

denial

of

service

vulnerabilities

on

some

Huawei

smartphones.

An

attacker

may

send

specially

crafted

TD-SCDMA

messages

from

a

rogue

base

station

to

the

affected

devices.

Due

to

insufficient

input

validation

of

two

values

when

parsing

the

messages

successful

exploit

may

cause

device

abnormal.

This

is

out

of

vulnerabilities.

Different

than

Affected

products

are:

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

HUAWEI

Mate

earlier

than

HUAWEI

Mate

Pro:

earlier

than

HUAWEI

Mate

RS:

earlier

than

HUAWEI

Mate

X:

earlier

than

HUAWEI

earlier

than

HUAWEI

Pro:

earlier

than

HUAWEI

earlier

than

HUAWEI

Pro:

earlier

than

HUAWEI

earlier

than

HUAWEI

nova

lite

earlier

than

Honor

Lite:

earlier

than

Honor

earlier

than

Honor

View

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

earlier

than

Honor

earlier

than

Honor

earlier

than

Honor

earlier

than


There is a denial of service vulnerability in the verisions V200R005C00SPC500 of S5700 and V200R005C00SPC500 of S6700. An attacker could exploit this vulnerability by sending specific message to a targeted device. Due to insufficient input validation successful exploit can cause the service abnormal.


Huawei

IPS

Module

have

an

insufficient

input

validation

vulnerability.

An

unauthenticated

remote

attacker

may

send

crafted

IKE

messages

to

the

affected

products.

Due

to

the

insufficient

validation

of

the

messages

successful

exploit

will

cause

invalid

memory

access

and

result

in

a

denial

of

service

on

the

affected

products.


Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059) 10.18.x.5057 (aka 15.36.x.5057) 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.


Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059) 10.18.x.5057 (aka 15.36.x.5057) 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to cause a denial of service via local access.


Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file successful exploit may cause device abnormal.


IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation. IBM X-Force ID: 165589.


Apple iPhone 1.1.1 with Bluetooth enabled allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via crafted Service Discovery Protocol (SDP) packets related to insufficient input validation.

insufficient input validation
denial of service
arbitrary code execution


A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted Cisco UDLD protocol packets to a directly connected affected device. A successful exploit could allow the attacker to execute arbitrary code with administrative privileges or cause the Cisco UDLD process to crash and restart multiple times causing the affected device to reload and resulting in a DoS condition. Note: The UDLD feature is disabled by default and the conditions to exploit this vulnerability are strict. The attacker needs full control of a directly connected device. That device must be connected over a port channel that has UDLD enabled. To trigger arbitrary code execution both the UDLD-enabled port channel and specific system conditions must exist. In the absence of either the UDLD-enabled port channel or the system conditions attempts to exploit this vulnerability will result in a DoS condition. It is possible but highly unlikely that an attacker could control the necessary conditions for exploitation. The CVSS score reflects this possibility. However given the complexity of exploitation Cisco has assigned a Medium Security Impact Rating (SIR) to this vulnerability.

insufficient input validation
denial of service
arbitrary code execution
dos


A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to a Layer 2-adjacent affected device. A successful exploit could allow the attacker to execute arbitrary code with administrative privileges or cause the Cisco Discovery Protocol process to crash and restart multiple times causing the affected device to reload and resulting in a DoS condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Exploitation of this vulnerability also requires jumbo frames to be enabled on the interface that receives the crafted Cisco Discovery Protocol packets on the affected device.


A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition of an affected device. The vulnerability is due to insufficient input validation during CAPWAP packet processing. An attacker could exploit this vulnerability by sending a crafted CAPWAP packet to an affected device resulting in a buffer over-read. A successful exploit could allow the attacker to cause the affected device to crash and reload resulting in a DoS condition on the affected device.

insufficient input validation
denial of service
buffer overread
dos


Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via \Insufficient input validation\ in the EAP-MSCHAPv2 state machine module.

insufficient input validation
denial of service
bypass authentication


Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by sending crafted traffic to the video service of an affected endpoint. A successful exploit could allow the attacker to cause the video service to crash resulting in a DoS condition on an affected device.

insufficient input validation
denial of service
dos


A vulnerability in the Operations Administration Maintenance and Provisioning (OAMP) OpsConsole Server for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated remote attacker to execute Insecure Direct Object Reference actions on specific pages within the OAMP application. The vulnerability is due to insufficient input validation on specific pages of the OAMP application. An attacker could exploit this vulnerability by authenticating to Cisco Unified CVP and sending crafted HTTP requests. A successful exploit could allow an attacker with administrator or read-only privileges to learn information outside of their expected scope. An attacker with administrator privileges could modify certain configuration details of resources outside of their defined scope which could result in a denial of service (DoS) condition.


A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of incoming mDNS traffic. An attacker could exploit this vulnerability by sending a crafted mDNS packet to an affected device through a wireless network that is configured in FlexConnect local switching mode or through a wired network on a configured mDNS VLAN. A successful exploit could allow the attacker to cause the access point (AP) to reboot resulting in a DoS condition.


A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that is received by an affected device. An attacker could exploit this vulnerability by sending DECnet traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload resulting in a DoS condition.


A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted PIM packet to an affected device. A successful exploit could allow the attacker to cause a traffic loop resulting in a DoS condition.


A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart resulting in a denial of service (DoS) condition.


A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to perform a denial of service (DoS) attack against an affected device. This vulnerability is due to insufficient input validation of incoming emails. An attacker could exploit this vulnerability by sending a crafted email through Cisco ESA. A successful exploit could allow the attacker to exhaust all the available CPU resources on an affected device for an extended period of time preventing other emails from being processed and resulting in a DoS condition.


A vulnerability in the integrated wireless access point (AP) packet processing of the Cisco 1000 Series Connected Grid Router (CGR1K) could allow an unauthenticated adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input validation of received traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the integrated AP to stop processing traffic resulting in a DoS condition. It may be necessary to manually reload the CGR1K to restore AP operation.


A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted H.323 traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to either reboot normally or reboot into maintenance mode which could result in a DoS condition on the device.


A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated adjacent attacker to cause a restart of the switch and result in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting a crafted association request. An exploit could allow the attacker to cause the switch to restart. This vulnerability affects Cisco Catalyst 3650 and 3850 switches running IOS XE Software versions 16.1 through 16.3.3 and acting as wireless LAN controllers (WLC). Cisco Bug IDs: CSCvd45069.


A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco Wireless LAN Controllers could allow an unauthenticated adjacent attacker to cause an affected device to reload unexpectedly resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation of 802.11v BSS Transition Management Response packets that an affected device receives from wireless clients. An attacker could exploit this vulnerability by sending a malformed 802.11v BSS Transition Management Response packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly resulting in a DoS condition. Cisco Bug IDs: CSCvb57803.


A vulnerability in the Real-Time Transport Protocol (RTP) bitstream processing of the Cisco Meeting Server could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient input validation of incoming RTP bitstreams. An attacker could exploit this vulnerability by sending a crafted RTP bitstream to an affected Cisco Meeting Server. A successful exploit could allow the attacker to deny audio and video services by causing media process crashes resulting in a DoS condition on the affected product. This vulnerability affects Cisco Meeting Server deployments that are running Cisco Meeting Server Software Releases 2.0 2.1 2.2 and 2.3. Cisco Bug IDs: CSCve79693 CSCvf91393 CSCvg64656 CSCvh30725 CSCvi86363.


A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by connecting as a wired client to the Ethernet interface of an affected device and sending a series of specific packets within a short time frame. A successful exploit could allow the attacker to cause a NULL pointer access that results in a reload of the affected device.


A vulnerability in the Constrained Application Protocol (CoAP) implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of incoming CoAP traffic. An attacker could exploit this vulnerability by sending a malformed CoAP packet to an affected device. A successful exploit could allow the attacker to force the CoAP server to stop interrupting communication to the IoT endpoints.


A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated adjacent attacker to cause a reload of an affected device resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation when the ISDN Q.931 messages are processed. An attacker could exploit this vulnerability by sending a malicious ISDN Q.931 message to an affected device. A successful exploit could allow the attacker to cause the process to crash resulting in a reload of the affected device.


A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated remote attacker to cause the client to crash resulting in a denial of service (DoS) condition. The attacker needs a valid developer account to exploit this vulnerability. The vulnerability is due to insufficient input validation when processing received adaptive cards. The attacker could exploit this vulnerability by sending an adaptive card with malicious content to an existing user of the Cisco Webex Teams client for Windows. A successful exploit could allow the attacker to cause the targeted user's client to crash continuously. This vulnerability was introduced in Cisco Webex Teams client for Windows Release 3.0.13131.


A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files resulting in a restart of the AMP Connector and a denial of service (DoS) condition of the Cisco AMP for Endpoints service. The vulnerability is due to insufficient input validation of specific file attributes. An attacker could exploit this vulnerability by providing a crafted file to a user of an affected system. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash resulting in missed detection and logging of the potentially malicious file. Continued attempts to scan the file could result in a DoS condition of the Cisco AMP for Endpoints service.


A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated remote attacker with read-only privileges to inject IOS commands to an affected device. The injected commands should require a higher privilege level in order to be executed. The vulnerability is due to insufficient input validation of specific HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a specific web UI endpoint on an affected device. A successful exploit could allow the attacker to inject IOS commands to the affected device which could allow the attacker to alter the configuration of the device or cause a denial of service (DoS) condition.


A vulnerability in the ssl_inspection component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated remote attacker to crash Snort instances. The vulnerability is due to insufficient input validation in the ssl_inspection component. An attacker could exploit this vulnerability by sending a malformed TLS packet through a Cisco Adaptive Security Appliance (ASA). A successful exploit could allow the attacker to crash a Snort instance resulting in a denial of service (DoS) condition.


A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated local attacker with privileged EXEC credentials to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient input validation of data passed to the Tcl interpreter. An attacker could exploit this vulnerability by executing crafted Tcl arguments on an affected device. An exploit could allow the attacker to cause the affected device to reload resulting in a DoS condition.


A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated remote attacker to modify the filesystem to cause a denial of service (DoS) or gain privileged access to the root filesystem. The vulnerability is due to insufficient input validation. An attacker with administrative privileges could exploit this vulnerability by sending requests with malformed parameters to the system using the console Secure Shell (SSH) or web API. A successful exploit could allow the attacker to modify the device configuration or cause a DoS.


A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient input validation when the software processes specific SNMP object identifiers. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload resulting in a DoS condition. Note: To exploit this vulnerability by using SNMPv2c or earlier the attacker must know the SNMP read-only community string for an affected system. To exploit this vulnerability by using SNMPv3 the attacker must know the user credentials for the affected system.


A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of incoming DHCP traffic. An attacker could exploit this vulnerability by sending a crafted DHCP request to an affected device. A successful exploit could allow the attacker to cause a restart of the DHCP server process causing a DoS condition.


A vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) on Cisco Mobility Management Entity (MME) could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an eNodeB that is connected to an affected device. The vulnerability is due to insufficient input validation of SCTP traffic. An attacker could exploit this vulnerability by leveraging a man-in-the-middle position between the eNodeB and the MME and then sending a crafted SCTP message to the MME. A successful exploit would cause the MME to stop sending SCTP messages to the eNodeB triggering a DoS condition.

insufficient input validation
denial of service
dos
man in the middle


An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver potentially causing memory corruptions in high privileged processes which can lead to escalation of privileges or denial of service.

insufficient input validation
denial of service
escalated privilege
memory corruption


A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to bypass Cisco FMC Software security restrictions and gain access to the underlying filesystem of the affected device.

insufficient input validation
directory traversal


Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160 RV160W RV260 RV260P and RV260W VPN Routers could allow an unauthenticated remote attacker to conduct directory traversal attacks and overwrite certain files that should be restricted on an affected system. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by using the web-based management interface to upload a file to location on an affected device that they should not have access to. A successful exploit could allow the attacker to overwrite files on the file system of the affected device.


A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated remote attacker to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vulnerability is due to insufficient input validation of the HTTPS URL by the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTPS request that contains directory traversal character sequences to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on the device.


A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an unauthenticated remote attacker to read any file from the CAF in the virtual instance running on the affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting crafted requests to the CAF web interface. The impacts of a successful exploit are limited to the scope of the virtual instance and do not impact the router that is hosting Cisco IOx. Cisco IOx Releases 1.0.0.0 and 1.1.0.0 are vulnerable. Cisco Bug IDs: CSCuy52302.


A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated remote attacker to access arbitrary files on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using directory traversal techniques to read files within the Cisco TelePresence IX5000 Series filesystem. This vulnerability affects Cisco TelePresence IX5000 Series devices running software version 8.2.0. Cisco Bug IDs: CSCvc52325.


A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated remote attacker to access arbitrary files in the context of the web root directory structure on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques to read files in the web root directory structure on the Cisco Unified Communications Manager filesystem. Cisco Bug IDs: CSCve13796.


SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient input validation. Any admin config and file readable by the app can be retrieved by the attacker. Furthermore some files can also be moved or deleted.


loklak is an open-source server application which is able to collect messages from various sources including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak less than or equal to commit 5f48476 a path traversal vulnerability exists. Insufficient input validation in the APIs exposed by the loklak server allowed a directory traversal vulnerability. Any admin configuration and files readable by the app available on the hosted file system can be retrieved by the attacker. Furthermore user-controlled content could be written to any admin config and files readable by the application. This has been patched in commit 50dd692. Users will need to upgrade their hosted instances of loklak to not be vulnerable to this exploit.


A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated remote attacker to perform directory traversal and access directories outside the restricted path. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a relative path in specific sfmgr commands. An exploit could allow the attacker to read or write arbitrary files on an sftunnel-connected peer device.


ColdFusion versions ColdFusion 2016 and ColdFusion 2018 have an insufficient input validation vulnerability. Successful exploitation could lead to application-level denial-of-service (dos).


Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insufficient input validation. An attacker could exploit this vulnerability by sending specially crafted NFC messages to the target device. Successful exploit could make a service crash.


Huawei DP300 V500R002C00 RP200 V500R002C00 V600R006C00 TE30 V100R001C10 V500R002C00 V600R006C00 TE40 V500R002C00 V600R006C00 TE50 V500R002C00 V600R006C00 TE60 V100R001C10 V500R002C00 V600R006C00 have a DoS vulnerability. Due to insufficient input validation an authenticated remote attacker could send malformed SOAP packets to the target device. Successful exploit could make some data overwritten leak device memory and potentially reset a process.


in

Huawei

IPS

Module

NGFW

Module

Secospace

Secospace

Secospace

has

a

DoS

vulnerability

due

to

insufficient

input

validation.

An

attacker

could

exploit

it

to

cause

unauthorized

memory

access

which

may

further

lead

to

system

exceptions.


Some huawei smartphones with software BTV-DL09C233B350 Berlin-L21HNC432B360 Berlin-L22HNC636B360 Berlin-L24HNC567B360 Berlin-L21C10B130 Berlin-L21C185B132 Berlin-L21C464B130 Berlin-L22C346B140 Berlin-L22C636B160 Berlin-L23C605B131 Berlin-L23DOMC109B160 MHA-AL00AC00B125 have a DoS vulnerability. Due to insufficient input validation an attacker could trick a user to execute a malicious application which could be exploited by attacker to launch DoS attacks.


Some Huawei smart phones with software of NXT-AL10C00B386 NXT-CL00C92B386 NXT-DL00C17B386 NXT-TL00C01B386SP01 NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System Information(SI) messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart.


Linux Linux kernel version at least v4.8 onwards probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..


Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70 11.11.70 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

insufficient input validation
escalated privilege


Insufficient input validation in subsystem for Intel(R) CSME before versions 12.0.45 and 13.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.


Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.


Insufficient input validation in subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.


Insufficient input validation in firmware update software for Intel(R) CSME before versions 12.0.45 13.0.10 and 14.0.10 may allow an authenticated user to potentially enable escalation of privilege via local access.


Insufficient input validation in the subsystem for Intel(R) AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.


Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60 11.11.60 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access.


Insufficient input validation in the BMC firmware for some Intel(R) Server Boards Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access.


Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation of privilege via local access.


Insufficient input validation in MEInfo software for Intel(R) CSME before versions 11.8.70 11.11.70 11.22.70 12.0.45 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.


In doSendObjectInfo of MtpServer.cpp there is a possible path traversal attack due to insufficient input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is required for exploitation.Product: AndroidVersions: Android-10Android ID: A-130656917

insufficient input validation
escalated privilege
dos


Some Huawei smart phones with the versions before Berlin-L21HNC185B381; the versions before Prague-AL00AC00B223; the versions before Prague-AL00BC00B223; the versions before Prague-AL00CC00B223; the versions before Prague-L31C432B208; the versions before Prague-TL00AC01B223; the versions before Prague-TL00AC01B223 have an information exposure vulnerability. When the user's smart phone connects to the malicious device for charging an unauthenticated attacker may activate some specific function by sending some specially crafted messages. Due to insufficient input validation of the messages successful exploit may cause information exposure.

insufficient input validation
information exposure


There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.

insufficient input validation
integer overflow


There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.


Huawei

have

an

integer

overflow

vulnerability.

Due

to

insufficient

input

validation

an

authenticated

remote

attacker

could

send

malformed

SOAP

packets

to

the

target

device.

Successful

exploit

could

cause

an

integer

overflow

and

might

reset

a

process.


Huawei

have

an

integer

overflow

vulnerability.

An

unauthenticated

remote

attacker

may

send

specially

crafted

messages

to

the

affected

products.

Due

to

insufficient

input

validation

successful

exploit

may

cause

integer

overflow

and

some

process

abnormal.


Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059) 10.18.x.5057 (aka 15.36.x.5057) 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.


SAP Internet Graphics Service versions - 7.20 7.20EXT 7.53 7.20_EX2 7.81 allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method IgsData::freeMemory() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack no data in the system can be viewed or modified.

insufficient input validation
memory corruption


SAP Internet Graphics Service versions - 7.20 7.20EXT 7.53 7.20_EX2 7.81 allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CiXMLIStreamRawBuffer::readRaw () which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack no data in the system can be viewed or modified.


SAP Internet Graphics Service versions - 7.20 7.20EXT 7.53 7.20_EX2 7.81 allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method Ups::AddPart() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack no data in the system can be viewed or modified.


SAP Internet Graphics Service versions - 7.20 7.20EXT 7.53 7.20_EX2 7.81 allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CMiniXMLParser::Parse() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack no data in the system can be viewed or modified.


SAP Internet Graphics Service versions - 7.20 7.20EXT 7.53 7.20_EX2 7.81 allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CDrawRaster::LoadImageFromMemory() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack no data in the system can be viewed or modified.


SAP Internet Graphics Service versions - 7.20 7.20EXT 7.53 7.20_EX2 7.81 allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method ChartInterpreter::DoIt() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack no data in the system can be viewed or modified.


SAP Internet Graphics Service versions - 7.20 7.20EXT 7.53 7.20_EX2 7.81 allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CXmlUtility::CheckLength() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack no data in the system can be viewed or modified.


A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated local attacker with privileged EXEC credentials to execute arbitrary code on the underlying operating system (OS) with root privileges. The vulnerability is due to insufficient input validation of data passed to the Tcl interpreter. An attacker could exploit this vulnerability by loading malicious Tcl code on an affected device. A successful exploit could allow the attacker to cause memory corruption or execute the code with root privileges on the underlying OS of the affected device.

insufficient input validation
memory corruption
arbitrary code execution


Huawei

MAX

PRESENCE

have

a

pointer

dereference

vulnerability.

Due

to

insufficient

input

validation

an

authenticated

local

attacker

may

craft

a

specific

XML

file

to

the

affected

products

to

cause

pointer

dereference.

Successful

exploit

will

cause

some

service

abnormal.

insufficient input validation
null pointer dereference


Huawei

ViewPoint

ViewPoint

Viewpoint

have

an

out-of-bounds

read

vulnerability.

An

attacker

has

to

control

the

peer

device

and

send

specially

crafted

messages

to

the

affected

products.

Due

to

insufficient

input

validation

successful

exploit

may

cause

some

service

abnormal.

insufficient input validation
out of bound read


RP200 V500R002C00 V600R006C00; TE30 V100R001C10 V500R002C00 V600R006C00; TE40 V500R002C00 V600R006C00; TE50 V500R002C00 V600R006C00; TE60 V100R001C10 V500R002C00 V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system.


Huawei

have

an

out-of-bounds

read

vulnerability

due

to

insufficient

input

validation.

An

unauthenticated

remote

attacker

could

exploit

this

vulnerability

by

sending

malformed

Session

Initiation

Protocol(SIP)

packets

to

the

target

device.

Successful

exploit

could

make

the

device

read

out

of

bounds

and

thus

cause

a

service

to

be

unavailable.


Huawei DP300 V500R002C00 RP200 V500R002C00 V600R006C00 TE30 V100R001C10 V500R002C00 V600R006C00 TE40 V500R002C00 V600R006C00 TE50 V500R002C00 V600R006C00 TE60 V100R001C10 V500R002C00 V600R006C00 have a out-of-bounds read vulnerability. Due to insufficient input validation an authenticated remote attacker could send malformed SOAP packets to the target device. Successful exploit could make the device access invalid memory and might reset a process.


Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability. An unauthenticated remote attacker has to control the peer device and craft the Signalling Connection Control Part (SCCP) messages to the target devices. Due to insufficient input validation of some values in the messages successful exploit will cause out-of-bounds read and some services abnormal.


with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

with

software

have

an

out-of-bounds

read

vulnerability.

Due

to

insufficient

input

validation

an

authenticated

remote

attacker

could

send

specially

crafted

message

to

the

target

device.Successful

exploit

of

the

vulnerability

could

cause

out-of-bounds

read

and

system

crash.


Insufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters before version 24.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

insufficient memory protection
escalated privilege


In all Qualcomm products with Android releases from CAF using the Linux kernel an overflow check in the USB interface was insufficient during boot.


Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.


insufficient password protection
information disclosure


A vulnerability in the Transport Layer Security (TLS) certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated remote attacker to perform insecure TLS client authentication on an affected device. The vulnerability is due to insufficient TLS client certificate validations for certificates sent between the various components of an ACI fabric. An attacker who has possession of a certificate that is trusted by the Cisco Manufacturing CA and the corresponding private key could exploit this vulnerability by presenting a valid certificate while attempting to connect to the targeted device. An exploit could allow the attacker to gain full control of all other components within the ACI fabric of an affected device.

insufficient tls client certificate validation


Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.