Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-48176PUBLISHED: 2023-01-31Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.
CVE-2022-45897PUBLISHED: 2023-01-31On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtain the stored cleartext credentials associated with those settings.
CVE-2022-32528PUBLISHED: 2023-01-30A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read files in the IGSS project report directory when an attacker sends specific messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)
CVE-2022-32529PUBLISHED: 2023-01-30
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted log data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versio...
CVE-2022-32747PUBLISHED: 2023-01-30
A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxureâ„¢ Cybersecurity Admin Expert (CAE) (Vers...
User Rank: Apprentice
6/25/2013 | 11:01:22 PM
How about some digital laws that finally are specific to IT infrastructures...lol...I know scares the daylights out of congress...but they have to do it.
http://ducknetweb.blogspot.com...
Also never seen such a group that was afraid to take time and educate themselves, as I have been a big proponent of restoring the Office of Technology Assessment...that's a tool for all of them to use...but even if they did restore the office and get help on board how many would use it..the next question...what a bunch of "its for those guys over there" paradigms...
http://ducknetweb.blogspot.com...
Want to catch a thief, well then think like one, want to catch a systems administrator, well then think like one. The side show the White House and Congress is running is indeed sad and there will be little support from technology companies because their politics are just walking all over folks like me with thinking they are superior when the truth is known it's the other way around. There's a great former Wall Street Quant who does a really good job with this and talks even about her days working at DE Shaw with Larry Summers. It is funny to hear her say and at the same time feel insulted when they would come back on all her hard futures work and want the charts in blue and red:) Nerds re never in control and she's right and thus so there will be little or no support to the government in the Snowden effort, self opinion included. Give Cathy's video a look and you won't be sorry and it's a good learning experience.
http://ducknetweb.blogspot.com...
Sadly a while back I said myself that the White House cabinet was catching the digital illiterate GOP virus going around and it's about what we are seeing.