Re: [FD] NoviFlow NoviWare <= NW400.2.6 multiple vulnerabilities

2017-08-22 Thread Francois Goichon via Fulldisclosure
Erratum: "Remote code execution in novi_process_manager_daemon" is CVE-2017-12787, not CVE-2017-12784. On Wed, Aug 16, 2017 at 2:21 PM, Francois Goichon wrote: > NoviFlow NoviWare <= NW400.2.6 multiple vulnerabilities > > > Introduction > == > NoviWare is a high-performance OpenFlow 1.3,

[FD] NoviFlow NoviWare <= NW400.2.6 multiple vulnerabilities

2017-08-17 Thread Francois Goichon via Fulldisclosure
NoviFlow NoviWare <= NW400.2.6 multiple vulnerabilities Introduction == NoviWare is a high-performance OpenFlow 1.3, 1.4 and 1.5 compliant switch software developed by NoviFlow and available for license to network equipment manufacturers. Multiple vulnerabilities were identified in the No