Securecomputing vulnerabilities
15 vulnerabilities
Known vulnerabilities in Securecomputing products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 10 products.
Products
10- Sidewinder G24 vulnerabilities
- Securityreporter3 vulnerabilities
- Sidewinder3 vulnerabilities
- Samsung Adsl Modem2 vulnerabilities
- Snapgear Sg5602 vulnerabilities
- Safeword Remoteaccess1 vulnerabilities
- Smartether Ss6215S Switch0 vulnerabilities
- Snapgear Sg5650 vulnerabilities
- Snapgear Sg5800 vulnerabilities
- Snapgear Sg7100 vulnerabilities
CVE-2007-4043securecomputingsecurityreporter
EPSS score1.56%
file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to bypass authentication via a name parameter ending with a "%00.gif" sequence. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files.CVE-2007-3986securecomputingsecurityreporterEPSS score1.72%
file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to bypass authentication via a name parameter that specifies the eventcache directory and a non-GIF file, which causes the $dontvalidate variable to be set to true. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files.CVE-2007-3985securecomputingsecurityreporterEPSS score1.91%
Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to download arbitrary files via a .. (dot dot) in the name parameter.CVE-2020-36909secure computingsnapgear management console sg560+1EPSS score0.74%
SnapGear Management Console SG560 3.1.5 contains a file manipulation vulnerability that allows authenticated users to read, write, and delete files using the edit_config_files CGI script. Attackers can manipulate POST request parameters in /cgi-bin/cgix/edit_config_files to access and modify files outside the intended /etc/config/ directory.CVE-2020-36908secure computingsnapgear management console sg560+1EPSS score0.28%
SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.CVE-2005-0865securecomputingsamsung_adsl_modemEPSS score1.73%
Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi.CVE-2005-0864securecomputingsamsung_adsl_modemEPSS score1.53%
The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request.CVE-2004-2544securecomputingsidewinder_g2EPSS score0.22%
Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might allow attackers to obtain sensitive information.CVE-2004-2543securecomputingsidewinder_g2EPSS score1.85%
Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service (proxy failure) via invalid traffic to the (1) T.120 or (2) RTSP proxy, or (3) invalid MIME messages to the mail filter. NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts after the failure.CVE-2004-2399securecomputingsidewinder_g2EPSS score1.23%
Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (CPU consumption) via delayed responses to DNS queries.CVE-2004-2545securecomputingsidewinder_g2EPSS score1.57%
Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (SMTP proxy failure) via unknown attack vendors involving an "extremely busy network." NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts after the failure.CVE-2004-00794dwebstar+55EPSS score9.54%
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.CVE-2004-00814dwebstar+55EPSS score7.23%
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.CVE-2004-01124dwebstar+54EPSS score10.42%
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.CVE-2006-5303securecomputingsafeword_remoteaccessEPSS score0.21%
Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading (1) base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and (2) plaintext data in SERVERS\Shared\signers.cfg. NOTE: the provenance of this information is unknown; the details are obtained from third party information.