Vulnerabilities > Protection Mechanism Failure

DATE CVE VULNERABILITY TITLE RISK
2018-05-31 CVE-2018-9311 Protection Mechanism Failure vulnerability in BMW Telematics Control Unit Firmware
The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.
network
low complexity
bmw CWE-693
critical
9.8
2018-05-17 CVE-2018-0326 Protection Mechanism Failure vulnerability in Cisco Telepresence Tx9000 Firmware 10.0(2.98000.99)
A vulnerability in the web UI of Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against a user of the web UI of the affected software.
network
low complexity
cisco CWE-693
6.1
2018-05-17 CVE-2018-0297 Protection Mechanism Failure vulnerability in Cisco Firepower Threat Defense
A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured Secure Sockets Layer (SSL) Access Control (AC) policy to block SSL traffic.
network
low complexity
cisco CWE-693
5.8
2018-05-02 CVE-2018-0250 Protection Mechanism Failure vulnerability in Cisco Aironet Access Point Software 8.2(160.0)/8.4(100.0)/8.7(1.3)
A vulnerability in Central Web Authentication (CWA) with FlexConnect Access Points (APs) for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list (ACL).
low complexity
cisco CWE-693
4.1
2018-04-19 CVE-2018-0254 Protection Mechanism Failure vulnerability in Cisco Firepower Threat Defense
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an Intelligent Application Bypass (IAB) with a drop percentage threshold is also configured.
network
low complexity
cisco CWE-693
5.3
2018-04-19 CVE-2018-0244 Protection Mechanism Failure vulnerability in Cisco Firepower Threat Defense
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file action policy to drop the Server Message Block (SMB) protocol if a malware file is detected.
network
low complexity
cisco CWE-693
5.8
2018-04-19 CVE-2018-0243 Protection Mechanism Failure vulnerability in Cisco Firepower Threat Defense
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file action policy that is intended to drop the Server Message Block Version 2 (SMB2) and SMB Version 3 (SMB3) protocols if malware is detected.
network
low complexity
cisco CWE-693
5.8
2018-02-08 CVE-2018-0138 Protection Mechanism Failure vulnerability in Cisco Firepower Threat Defense
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block files transmitted to an affected device via the BitTorrent protocol.
network
low complexity
cisco CWE-693
5.3
2018-02-07 CVE-2018-6794 Protection Mechanism Failure vulnerability in multiple products
Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c.
network
low complexity
suricata-ids debian CWE-693
5.3
2017-11-22 CVE-2017-8864 Protection Mechanism Failure vulnerability in Cohuhd 3960Hd Firmware
Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side "if (!passwordsAreEqual())" test.
network
low complexity
cohuhd CWE-693
critical
9.8