Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-2339PUBLISHED: 2022-07-07With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.
CVE-2022-20752PUBLISHED: 2022-07-06
A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to perform a timing attack. This vulnerability is due to insufficient pro...
CVE-2022-20768PUBLISHED: 2022-07-06
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials....
CVE-2022-20791PUBLISHED: 2022-07-06
A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an auth...
CVE-2022-20800PUBLISHED: 2022-07-06
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), and Cisco Unity ...
User Rank: Apprentice
6/9/2017 | 9:33:58 PM
I started to experience these problems at home more than a year ago. One of my sons got a Roku box and later NVidia media shield.
Many times we had been attacked and cut of the internet services only when using any of these two boxes. Started with a massive DoS that somehow poisoned the CAM table of the managed switch. As we do not have any VLANS or separate network for Roku or NVidia boxes, it ended up corrupting and cutting of the internet services as the exit gateway on any PC at home ends in 0.0.0.0 instead of the right one. It also poisons the DNS cache of the home router.
After that I put in service a Cisco ASA 5506x- Firepower and things turned more difficult for them.
Two weeks ago I took the Cisco ASA out and put a Fortinet 30E but forgot to enable the DoS policy, hence, last night we lost the internet again but now the policy is in place, as well as IPS (Intrusion Prevention System). Needeles to say this weekend, the NVidia shield will end in its own Vlan and VDOM (as fortigate callst it) and in a new managed switch with ARP protection as well.
Well, not many home users will have the knowkedge and capacity to put this toghether but let me tell you that 99% oh those "royuters" at home would not last 10 seconds. Even some of the "commercial" grades one like D Link D 520 that I had to put in the rubbish bin.
Yes, agree, there is a gigantic problem..............I can even see the security logs of the Fortigate 30E with the HTTP injection coming in...............quite an incredible and "invisible to the human eyes" problem.