Page 4 of 41 results (0.003 seconds)

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

15 May 2003 — 3com OfficeConnect Remote 812 ADSL Router 1.1.7 does not properly clear memory from DHCP responses, which allows remote attackers to identify the contents of previous HTTP requests by sniffing DHCP packets. 3com OfficeConnect Remote 812 ADSL Router 1.1.7 no limpia la memoria de peticiones DHCP, lo que permite que atacantes remotos identifiquen los contenidos de peticiones HTTP previas husmeando paquetes DHCP. • http://marc.info/?l=bugtraq&m=105292451702516&w=2 •

CVSS: 7.5EPSS: 19%CPEs: 3EXPL: 3

31 Dec 2002 — Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command. • https://www.exploit-db.com/exploits/22060 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 0

31 Aug 2002 — 3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router. • http://archives.neohapsis.com/archives/bugtraq/2002-05/0230.html •

CVSS: 9.8EPSS: 5%CPEs: 1EXPL: 2

11 Jun 2002 — Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long commands such as login. • https://www.exploit-db.com/exploits/21429 •

CVSS: 7.5EPSS: 5%CPEs: 2EXPL: 3

18 Oct 2001 — 3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of "%s" strings, possibly triggering a format string vulnerability. • https://www.exploit-db.com/exploits/20847 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

26 Sep 2001 — Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request. • http://archives.neohapsis.com/archives/bugtraq/2001-09/0217.html •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

21 Jul 2001 — SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via (1) dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or (2) ap128bWepKeyValue in the ap128bWEPKeyTable in the Symbol MIB. • https://exchange.xforce.ibmcloud.com/vulnerabilities/6232 •

CVSS: 10.0EPSS: 9%CPEs: 2EXPL: 2

12 Jul 2001 — The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing. • https://www.exploit-db.com/exploits/21011 • CWE-307: Improper Restriction of Excessive Authentication Attempts •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

30 Aug 1999 — Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized activities. • http://marc.info/?l=bugtraq&m=93616983223090&w=2 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

12 Aug 1999 — 3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port. • http://marc.info/?l=bugtraq&m=93458364903256&w=2 •