Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-15310 State: PUBLISHED Published: 2018-09-13T14:00:00Z Last Updated: 2024-09-16T18:07:46.607Z Vendors: F5 Networks, Inc. Products: BIG-IP APM Problem Types: Information disclosure Description: A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K40625021
CVE ID: CVE-2018-15311 State: PUBLISHED Published: 2018-10-10T14:00:00Z Last Updated: 2024-09-16T23:05:47.499Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload (LRO) feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected customers will be on 13.1.x. LRO has been available since 11.4.0 but is not enabled by default until 13.1.0. A
affected customers will be on 13.1.x. LRO has been available since 11.4.0 but is not enabled by default until 13.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K07550539
CVE ID: CVE-2018-15312 State: PUBLISHED Published: 2018-10-19T13:00:00Z Last Updated: 2024-09-17T03:33:09.101Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: XSS Description: On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an authenticated user to execute JavaScript for the currently logged-in user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041932 - https://support.f5.com/csp/article/K44462
E Program Container: References: - http://www.securitytracker.com/id/1041932 - https://support.f5.com/csp/article/K44462254
CVE ID: CVE-2018-15313 State: PUBLISHED Published: 2018-10-19T13:00:00Z Last Updated: 2024-09-16T20:22:56.163Z Vendors: F5 Networks, Inc. Products: BIG-IP AFM Problem Types: XSS Description: On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K21042153 - http://www.securityfocus.com/bid/105733 - http://www.securitytracker.com/id/1041934
CVE ID: CVE-2018-15314 State: PUBLISHED Published: 2018-10-19T13:00:00Z Last Updated: 2024-09-16T18:24:44.180Z Vendors: F5 Networks, Inc. Products: BIG-IP AFM Problem Types: XSS Description: On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041933 - https://support.f5.com/csp/article/K04524282 - http://www.securityfocus.com/bid/105733
CVE ID: CVE-2018-15315 State: PUBLISHED Published: 2018-10-19T13:00:00Z Last Updated: 2024-09-16T17:28:29.804Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: XSS Description: On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed Configuration Utility page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041935 - https://support.f5.com/csp/article/K41704442
CVE ID: CVE-2018-15316 State: PUBLISHED Published: 2018-10-19T13:00:00Z Last Updated: 2024-09-17T03:59:34.793Z Vendors: F5 Networks, Inc. Products: BIG-IP (APM), BIG-IP APM Clients, BIG-IP Edge Client Problem Types: Privilege escalation Description: In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041936 - http://www.securityfocus.com/bid/105731 - https://support.f5.com/csp/article/K51220077
CVE ID: CVE-2018-15317 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:46:25.577Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption in the SSL data structures leading to intermittent decrypt BAD_RECORD_MAC errors. Clients will be unable to access the application load balanced by a virtual server with an SSL profile until tmm is restarted. Additional Analyst Note
ss the application load balanced by a virtual server with an SSL profile until tmm is restarted. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K43625118 - https://support.f5.com/csp/article/K43625118?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2018-15318 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:46:25.458Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial flow will remain after the closing procedure is complete. TMM may restart and produce a core file as a result of this condition. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K1624
his condition. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K16248201
CVE ID: CVE-2018-15319 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:46:25.504Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107052 - https://support.f5.com
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107052 - https://support.f5.com/csp/article/K64208870
CVE ID: CVE-2018-15320 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:46:25.460Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system. The configuration which exposes this condition is the BIG-IP self IP address which is part of a VLAN group and has the Port Lockdown setting configured with anything other than "allow-all". Additional Analyst Notes: - CVE Program Container: References: - https://support.
with anything other than "allow-all". Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K72442354
CVE ID: CVE-2018-15321 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:54:01.880Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), BIG-IQ Centralized Management, BIG-IQ Cloud and Orchestration, iWorkflow, Enterprise Manager Problem Types: Privilege escalation Description: When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.1.0-2.3.0, or Enterprise Manager 3.1.1 is licensed for Appliance Mode, Admin and Resource administr
n 1.0.0, iWorkflow 2.1.0-2.3.0, or Enterprise Manager 3.1.1 is licensed for Appliance Mode, Admin and Resource administrator roles can by-pass BIG-IP Appliance Mode restrictions to overwrite critical system files. Attackers of high privilege level are able to overwrite critical system files which bypasses security controls in place to limit TMSH commands. This is possible with an administrator or resource administrator roles when granted TMSH. Resource administrator roles must have TMSH access in order to perform this attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K01067037
CVE ID: CVE-2018-15322 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:54:01.869Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe), BIG-IQ Centralized Management, BIG-IQ Cloud and Orchestration, iWorkflow, Enterprise Manager Problem Types: DoS Description: On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.0.1-2.3.0, or Enterprise Manager 3.1.1 a BIG-IP user granted with tmsh access may cause the BIG-IP sy
1.0.0, iWorkflow 2.0.1-2.3.0, or Enterprise Manager 3.1.1 a BIG-IP user granted with tmsh access may cause the BIG-IP system to experience denial-of-service (DoS) when the BIG-IP user uses the tmsh utility to run the edit cli preference command and proceeds to save the changes to another filename repeatedly. This action utilises storage space on the /var partition and when performed repeatedly causes the /var partition to be full. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K28003839
CVE ID: CVE-2018-15323 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:54:01.882Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM,AFM, Analytics, APM ASM, Edge Gateway, FPS, PSM, Websafe) Problem Types: DoS Description: On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the TMM process may produce a core file and take the configured HA action. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K26583415
CVE ID: CVE-2018-15324 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:54:01.829Z Vendors: F5 Networks, Inc. Products: BIG-IP (APM) Problem Types: DoS Description: On BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially crafted request with APM portal access. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K52206731
CVE ID: CVE-2018-15325 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:54:01.936Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may leak a small amount of memory when executing commands Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K77313277
CVE ID: CVE-2018-15326 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:54:01.859Z Vendors: F5 Networks, Inc. Products: BIG-IP (APM) Problem Types: Unauthorized access Description: In some situations on BIG-IP APM 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.2, the CRLDP Auth access policy agent may treat revoked certificates as valid when the BIG-IP APM system fails to download a new Certificate Revocation List. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K34652116 - http://www.securityfocus.com/bid/106180
CVE ID: CVE-2018-15327 State: PUBLISHED Published: 2018-10-31T14:00:00 Last Updated: 2024-08-05T09:54:01.891Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), Enterprise Manager Problem Types: Privilege escalation Description: In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/c
commands may not be enforced. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K20222812
CVE ID: CVE-2018-15328 State: PUBLISHED Published: 2018-12-12T14:00:00 Last Updated: 2024-08-05T09:54:01.940Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), Enterprise Manager, BIG-IQ Centralized Management, F5 iWorkflow Problem Types: Information disclosure Description: On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap destinations that are used for authentication and privacy are not handled by the BIG-IP system Secure Vault feature; they are written in the clear to the various configurati
vacy are not handled by the BIG-IP system Secure Vault feature; they are written in the clear to the various configuration files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106258 - https://support.f5.com/csp/article/K42027747
CVE ID: CVE-2018-15329 State: PUBLISHED Published: 2018-12-20T20:00:00Z Last Updated: 2024-09-16T22:45:43.771Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), Enterprise Manager Problem Types: Privilege Escalation Description: On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. Additional Analyst Notes: - CVE Program Container: References: - http
trictions on allowed commands may not be enforced. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K61620494
CVE ID: CVE-2018-15330 State: PUBLISHED Published: 2018-12-20T20:00:00Z Last Updated: 2024-09-16T22:25:06.058Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a payload, the BIG-IP system will experience a fatal error and may cause the Traffic Management Microkernel (TMM) to produce a core file. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K23328310
CVE ID: CVE-2018-15331 State: PUBLISHED Published: 2018-12-20T20:00:00Z Last Updated: 2024-09-16T16:33:06.373Z Vendors: F5 Networks, Inc. Products: BIG-IP (AAM) Problem Types: Privilege Escalation Description: On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K54843525
CVE ID: CVE-2018-15332 State: PUBLISHED Published: 2018-12-06T14:00:00 Last Updated: 2024-08-05T09:54:02.334Z Vendors: F5 Networks, Inc. Products: BIG-IP (APM), BIG-IP APM Clients, BIG-IP Edge Client Problem Types: Privilege Escalation Description: The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K12130880 - http://www.securityfocus.com/bid/106135
CVE ID: CVE-2018-15333 State: PUBLISHED Published: 2018-12-28T15:00:00 Last Updated: 2024-08-05T09:54:01.995Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: Information Leakage Description: On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously generated and available snapshot files on the BIG-IP configuration utility such as QKView and TCPDumps. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K53620021 - http://
Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K53620021 - http://www.securityfocus.com/bid/106380 - https://support.f5.com/csp/article/K53620021?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2018-15334 State: PUBLISHED Published: 2018-12-28T15:00:00 Last Updated: 2024-08-05T09:54:01.830Z Vendors: F5 Networks, Inc. Products: BIG-IP (APM) Problem Types: CSRF Description: A cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require re-authentication. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K74114570 - http://www.securityfocus.com/bid/106364
CVE ID: CVE-2018-15335 State: PUBLISHED Published: 2018-12-28T15:00:00 Last Updated: 2024-08-05T09:54:03.549Z Vendors: F5 Networks, Inc. Products: BIG-IP (APM) Problem Types: DoS Description: When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failure response Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106355 - https://support.f5.com/csp/article/K27617652
CVE ID: CVE-2018-15336 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15337 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15338 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15339 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15340 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15341 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15342 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15343 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15344 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15345 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15346 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15347 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15348 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15349 State: REJECTED Published: 2019-02-12T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15350 State: PUBLISHED Published: 2018-08-17T14:00:00 Last Updated: 2024-08-05T09:54:03.564Z Vendors: Kaspersky Lab Products: Kraftway Problem Types: Router Default Credentials Description: Router Default Credentials in Kraftway 24F2XG Router firmware version 3.5.30.1118 allow remote attackers to get privileged access to the router. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-006-kraftway-24f2xg-router-default-credentials/
CVE ID: CVE-2018-15351 State: PUBLISHED Published: 2018-08-17T14:00:00 Last Updated: 2024-08-05T09:54:01.983Z Vendors: Kaspersky Lab Products: Kraftway Problem Types: Denial of service via crafting malicious link and sending it to a privileged user Description: Denial of service via crafting malicious link and sending it to a privileged user can cause Denial of Service in Kraftway 24F2XG Router firmware version 3.5.30.1118. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-007-kraftway-24f2xg-router-denial-of-service/
CVE ID: CVE-2018-15352 State: PUBLISHED Published: 2018-08-17T14:00:00 Last Updated: 2024-08-05T09:54:01.844Z Vendors: Kaspersky Lab Products: Kraftway Problem Types: Denial of service by an attacker with low privileges Description: An attacker with low privileges can cause denial of service in Kraftway 24F2XG Router firmware version 3.5.30.1118. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-008-kraftway-24f2xg-router-denial-of-service/
CVE ID: CVE-2018-15353 State: PUBLISHED Published: 2018-08-17T14:00:00 Last Updated: 2024-08-05T09:54:03.362Z Vendors: Kaspersky Lab Products: Kraftway Problem Types: A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution Description: A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftway 24F2XG Router firmware 3.5.30.1118. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-009-kraftway-24f2xg-router-possible-remote-code-execution/
CVE ID: CVE-2018-15354 State: PUBLISHED Published: 2018-08-17T14:00:00 Last Updated: 2024-08-05T09:54:03.595Z Vendors: Kaspersky Lab Products: Kraftway Problem Types: A Buffer Overflow exploited through web interface by remote attacker cause denial of service Description: A Buffer Overflow exploited through web interface by remote attacker can cause denial of service in Kraftway 24F2XG Router firmware 3.5.30.1118. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-010-kraftway-24f2xg-router-denial-of-service/