ByteOS

cpe:2.3:a:juniper:smartpass:8.0:*:*:*:*:*:*:*

>>smartpass>>8.0

cpe:2.3:a:juniper:smartpass:8.0.2.1:*:*:*:*:*:*:*

>>smartpass>>8.0.2.1

cpe:2.3:a:juniper:smartpass:8.0.3.1:*:*:*:*:*:*:*

>>smartpass>>8.0.3.1

cpe:2.3:a:juniper:smartpass:9.0:*:*:*:*:*:*:*

>>smartpass>>9.0

cpe:2.3:a:juniper:smartpass:9.1:*:*:*:*:*:*:*

>>smartpass>>9.1

cpe:2.3:a:juniper:mobile_system_software:8.0:*:*:*:*:*:*:*

>>mobile_system_software>>8.0

cpe:2.3:a:juniper:mobile_system_software:8.0.2.2:*:*:*:*:*:*:*

>>mobile_system_software>>8.0.2.2

cpe:2.3:a:juniper:mobile_system_software:8.0.3.6:*:*:*:*:*:*:*

>>mobile_system_software>>8.0.3.6

cpe:2.3:a:juniper:mobile_system_software:9.0:*:*:*:*:*:*:*

>>mobile_system_software>>9.0

cpe:2.3:a:juniper:mobile_system_software:9.0.2.5:*:*:*:*:*:*:*

>>mobile_system_software>>9.0.2.5

cpe:2.3:a:juniper:mobile_system_software:9.1:*:*:*:*:*:*:*

>>mobile_system_software>>9.1

cpe:2.3:a:juniper:ringmaster:8.0:*:*:*:*:*:*:*

>>ringmaster>>8.0

cpe:2.3:a:juniper:ringmaster:8.0.2.1:*:*:*:*:*:*:*

>>ringmaster>>8.0.2.1

cpe:2.3:a:juniper:ringmaster:8.0.3.2:*:*:*:*:*:*:*

>>ringmaster>>8.0.3.2

cpe:2.3:a:juniper:ringmaster:9.0:*:*:*:*:*:*:*

>>ringmaster>>9.0

cpe:2.3:a:juniper:ringmaster:9.0.2.1:*:*:*:*:*:*:*

>>ringmaster>>9.0.2.1

cpe:2.3:a:juniper:ringmaster:9.1:*:*:*:*:*:*:*

>>ringmaster>>9.1

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/71612	cve@mitre.org	N/A
http://www.securitytracker.com/id/1031360	cve@mitre.org	N/A
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10662	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/71612	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1031360	af854a3a-2127-422b-91ae-364da2661108	N/A
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10662	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/71612

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1031360

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10662

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/71612

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1031360

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10662

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Similar CVEs

128Records found

CVE-2010-2289

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-0.59% / 68.25%

7 Day CHG~0.00%

Published-15 Jun, 2010 | 01:00

Updated-11 Apr, 2025 | 00:51

Open redirect vulnerability in dana/home/homepage.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Location parameter.

Vendor-n/a Juniper Networks, Inc.

Product-secure_access n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2021-31375

Matching Score-6

Matching Score-6

CVSS Score-7.2||HIGH

EPSS-0.21% / 43.15%

7 Day CHG~0.00%

Published-19 Oct, 2021 | 18:17

Updated-17 Sep, 2024 | 02:06

Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed

An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed. This, in turn, may allow a spoofed advertisement to be accepted or propagated. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S18; 15.1 versions prior to 15.1R7-S9; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R2.

Product-junos Junos OS

CWE ID-CWE-358

Improperly Implemented Security Check for Standard

CWE ID-CWE-20

Improper Input Validation

CVE-2024-39513

Matching Score-6

Matching Score-6

CVSS Score-6.8||MEDIUM

EPSS-0.07% / 21.00%

7 Day CHG~0.00%

Published-10 Jul, 2024 | 23:03

Updated-07 Feb, 2025 | 19:38

Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager

An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Denial of Service (DoS). When a specific "clear" command is run, the Advanced Forwarding Toolkit manager (evo-aftmand-bt or evo-aftmand-zx) crashes and restarts. The crash impacts all traffic going through the FPCs, causing a DoS. Running the command repeatedly leads to a sustained DoS condition. This issue affects Junos OS Evolved: * All versions before 20.4R3-S9-EVO, * from 21.2-EVO before 21.2R3-S7-EVO, * from 21.3-EVO before 21.3R3-S5-EVO, * from 21.4-EVO before 21.4R3-S6-EVO, * from 22.1-EVO before 22.1R3-S4-EVO, * from 22.2-EVO before 22.2R3-S3-EVO, * from 22.3-EVO before 22.3R3-S3-EVO, * from 22.4-EVO before 22.4R3-EVO, * from 23.2-EVO before 23.2R2-EVO.

Product-junos_os_evolved Junos OS Evolved

CWE ID-CWE-20

Improper Input Validation

CVE-2024-39511

Matching Score-6

Matching Score-6

CVSS Score-6.8||MEDIUM

EPSS-0.07% / 21.20%

7 Day CHG~0.00%

Published-10 Jul, 2024 | 22:58

Updated-07 Feb, 2025 | 19:29

Junos OS: The 802.1X Authentication Daemon crashes on running a specific command

An Improper Input Validation vulnerability in the 802.1X Authentication (dot1x) Daemon of Juniper Networks Junos OS allows a local, low-privileged attacker with access to the CLI to cause a Denial of Service (DoS). On running a specific operational dot1x command, the dot1x daemon crashes. An attacker can cause a sustained DoS condition by running this command repeatedly. When the crash occurs, the authentication status of any 802.1x clients is cleared, and any authorized dot1x port becomes unauthorized. The client cannot re-authenticate until the dot1x daemon restarts. This issue affects Junos OS: * All versions before 20.4R3-S10; * 21.2 versions before 21.2R3-S7; * 21.4 versions before 21.4R3-S6; * 22.1 versions before 22.1R3-S5; * 22.2 versions before 22.2R3-S3; * 22.3 versions before 22.3R3-S2; * 22.4 versions before 22.4R3-S1; * 23.2 versions before 23.2R2.

Product-junos Junos OS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-31372

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-0.52% / 65.90%

7 Day CHG~0.00%

Published-19 Oct, 2021 | 18:17

Updated-16 Sep, 2024 | 20:47

Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the target device. This issue affects: Juniper Networks Junos OS All versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R3-S3; 19.3 versions prior to 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2;

Product-junos Junos OS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-31373

Matching Score-6

Matching Score-6

CVSS Score-8||HIGH

EPSS-0.28% / 51.02%

7 Day CHG~0.00%

Published-19 Oct, 2021 | 18:17

Updated-16 Sep, 2024 | 18:34

Junos OS: SRX Series: Persistent XSS vulnerability in J-Web

A persistent Cross-Site Scripting (XSS) vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web administration session, or hijack another user's active session to perform administrative actions. This issue affects: Juniper Networks Junos OS on SRX Series: 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S8; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3-S1; 20.3 versions prior to 20.3R2-S1, 20.3R3.

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE ID-CWE-20

Improper Input Validation

CVE-2013-6618

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9||HIGH

EPSS-8.86% / 92.21%

7 Day CHG~0.00%

Published-05 Nov, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action.

Vendor-n/a Juniper Networks, Inc.

Product-junos n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2017-2340

Matching Score-6

Matching Score-6

CVSS Score-5.3||MEDIUM

EPSS-0.41% / 60.62%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can result in a PFE (Packet Forwarding Engine) hang or crash.

Product-junos Junos OS on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured

CWE ID-CWE-20

Improper Input Validation

CVE-2021-0278

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-0.17% / 38.31%

7 Day CHG~0.00%

Published-15 Jul, 2021 | 20:00

Updated-17 Sep, 2024 | 03:37

Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4 junos:20.1R2-S2 junos:20.1R3 junos:20.2R3-S1 junos:20.3X75-D20 junos:20.3X75-D30 junos:20.4R2-S1 junos:20.4R3 junos:21.1R1-S1 junos:21.1R2 junos:21.2R1 junos:21.3R1 This issue affects: Juniper Networks Junos OS 19.3 versions 19.3R1 and above prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R2-S2, 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

Product-junos Junos OS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-1367

Matching Score-4

Assigner-Cisco Systems, Inc.

Matching Score-4

Assigner-Cisco Systems, Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.22% / 44.67%

7 Day CHG~0.00%

Published-24 Feb, 2021 | 19:30

Updated-08 Nov, 2024 | 23:38

Cisco NX-OS Software Protocol Independent Multicast Denial of Service Vulnerability

A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted PIM packet to an affected device. A successful exploit could allow the attacker to cause a traffic loop, resulting in a DoS condition.

CWE ID-CWE-20

Improper Input Validation

CVE-2007-0524

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.22% / 44.90%

7 Day CHG~0.00%

Published-26 Jan, 2007 | 01:00

Updated-07 Aug, 2024 | 12:19

The LG Chocolate KG800 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push.

Vendor-lg_electronics n/a

Product-chocolate_kg800 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2018-0395

Matching Score-4

Assigner-Cisco Systems, Inc.

Product-firepower_9300 nexus_7000_4-slot nexus_7700_6-slot nx-os nexus_7000_18-slot nexus_7000_9-slot nexus_7000_10-slot nexus_7700_10-slot nexus_7700_18-slot ucs firepower_extensible_operating_system nexus_7700_2-slot Firepower 4100 Series Next-Generation Firewalls Cisco NX-OS Software

Matching Score-4

Assigner-Cisco Systems, Inc.

CVSS Score-8.8||HIGH

EPSS-0.34% / 55.98%

7 Day CHG~0.00%

Published-17 Oct, 2018 | 20:00

Updated-26 Nov, 2024 | 14:25

Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. The vulnerability is due to improper input validation of certain type, length, value (TLV) fields of the LLDP frame header. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface on the targeted device. A successful exploit could allow the attacker to cause the switch to reload unexpectedly.

Vendor-Cisco Systems, Inc.

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5303

Matching Score-4

Assigner-Huawei Technologies

Product-p20_pro_firmware sydney-l22 honor_v20_firmware charlotte-l29c columbia-l29d_firmware sydney-l21_firmware sydney-l21 y9_2019 sydneym-l23_firmware bla-l29c ever-l29b_firmware emily-l29c_firmware p30_pro_firmware honor_20 mate_20_pro honor_view_20 mate_20_x jackman-l22_firmware p20 nova_lite_3 honor_magic2 paris-l29b_firmware honor_magic2_firmware sydneym-l03_firmware p30_pro columbia-al10b_firmware cornell-al00a sydney-l22br alp-l29_firmware sydney-l22br_firmware berkeley-l09_firmware alp-l09 emily-l09c_firmware p30_firmware yale-l21a_firmware honor_10_lite_firmware honor_v20 y9_2019_firmware sydneym-l21_firmware berkeley-al20 alp-l09_firmware mate_20 emily-l09c cornell-al00a_firmware sydneym-l01 cornell-l29a sydney-l21br_firmware sydneym-l22 honor_view_20_firmware paris-l29b paris-l21b_firmware sydneym-l22_firmware sydney-al00_firmware sydneym-l01_firmware berkeley-al20_firmware ever-l29b columbia-l29d columbia-al10b sydneym-l03 jackman-l22 honor_10_lite paris-l21meb_firmware paris-l21b sydneym-l23 yale-l21a charlotte-l09c nova_lite_3_firmware alp-l29 p20_firmware sydney-l22_firmware berkeley-l09 p20_pro sydney-al00 mate_20_rs_firmware honor_20_firmware sydneym-l21 mate_20_x_firmware charlotte-l29c_firmware alp-al00b_firmware paris-l21meb sydneym-al00_firmware sydney-l21br mate_20_firmware p30 mate_20_rs cornell-l29a_firmware bla-l29c_firmware sydneym-al00 charlotte-l09c_firmware mate_20_pro_firmware honor_8x_firmware honor_8x alp-al00b emily-l29c Paris-L21MEB SydneyM-L03 SydneyM-L21 HUAWEI Mate 20 Pro BLA-L29C ALP-L09 HUAWEI P20 Pro Ever-L29B SydneyM-L23 Cornell-AL00A Emily-L09C Paris-L29B Honor 8X SydneyM-L22 Cornell-L29A Columbia-L29D Charlotte-L09C Sydney-AL00 Honor V20 HUAWEI Mate 20 RS SydneyM-L01 HUAWEI P30 Honor Magic2 Berkeley-AL20 Sydney-L21 HUAWEI nova lite 3 Sydney-L22 Honor 20 Sydney-L21BR Paris-L21B HUAWEI Mate 20 X Berkeley-L09 ALP-AL00B Honor 10 Lite Jackman-L22 SydneyM-AL00 Columbia-AL10B HUAWEI P20 ALP-L29 Sydney-L22BR HUAWEI P30 Pro Honor View 20 HUAWEI Y9 2019 Yale-L21A Emily-L29C Charlotte-L29C HUAWEI Mate 20

Matching Score-4

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.06% / 20.33%

7 Day CHG~0.00%

Published-27 Apr, 2020 | 20:01

Updated-04 Aug, 2024 | 19:54

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 2 out of 2 vulnerabilities. Different than CVE-2020-5302. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Vendor-Huawei Technologies Co., Ltd.

CWE ID-CWE-20

Improper Input Validation

CVE-2017-0076

Matching Score-4

Matching Score-4

CVSS Score-5.4||MEDIUM

EPSS-0.65% / 69.94%

7 Day CHG~0.00%

Published-17 Mar, 2017 | 00:00

Updated-20 Apr, 2025 | 01:37

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0097, and CVE-2017-0099.

Vendor-Microsoft Corporation

Product-windows_server_2008 windows_7 windows_server_2012 windows_server_2016 windows_8.1 windows_vista windows_10 Hyper-V

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1585

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.27% / 49.75%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly validate certain length values for the MS-MMC dissector, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2017-16813

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.01% / 1.67%

7 Day CHG~0.00%

Published-26 Feb, 2018 | 22:00

Updated-05 Aug, 2024 | 20:35

A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs when a user uploads a file that includes a hexadecimal Unicode character in the "filename" parameter via Wi-Fi, since the app could fail to parse this.

Vendor-n/a Foxit Software Incorporated

Product-mobilepdf n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1584

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_version_5_and_6_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1574

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_bthci_eir_ad_data function in epan/dissectors/packet-bthci_cmd.c in the Bluetooth HCI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a counter variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1580

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_cmstatus_tlv function in plugins/docsis/packet-cmstatus.c in the DOCSIS CM-STATUS dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 uses an incorrect data type for a position variable, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1577

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_sip_p_charging_func_addresses function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle offset data associated with a quoted string, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1578

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_pw_eth_heuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service (loop) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1583

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_version_4_primary_header function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2017-0098

Matching Score-4

Matching Score-4

CVSS Score-5.4||MEDIUM

EPSS-0.62% / 69.22%

7 Day CHG~0.00%

Published-17 Mar, 2017 | 00:00

Updated-20 Apr, 2025 | 01:37

Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in CVE-2017-0074, CVE-2017-0076, CVE-2017-0097, and CVE-2017-0099.

Vendor-Microsoft Corporation

Product-windows_10 windows_server_2016 Hyper-V

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1573

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1581

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_pft_fec_detailed function in epan/dissectors/packet-dcp-etsi.c in the DCP-ETSI dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle fragment gaps, which allows remote attackers to cause a denial of service (loop) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1572

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_oampdu_event_notification function in epan/dissectors/packet-slowprotocols.c in the IEEE 802.3 Slow Protocols dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle certain short lengths, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2013-1575

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.23% / 45.53%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_r3_cmd_alarmconfigure function in epan/dissectors/packet-assa_r3.c in the R3 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a certain alarm length, which allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5302

Matching Score-4

Assigner-Huawei Technologies