Network Security Archives - Page 9 of 17

F5 patches Critical RCE vulnerability (CVE-2020-5902) in BIG-IP configuration utility

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 4, 2020 / AAM, AFM, Analytics, APM, ASM, BIG-IP, CVE-2020-5902, DNS, F5, FPS, GTM, Link Controller, LTM, PEM, RCE, TMUI

F5 has patched a Critical remote code execution (RCE) vulnerability (CVE-2020-5902) in the Configuration utility of BIG-IP. Researchers further discovered 8,000 devices were vulnerable on the internet and could result in full system compromise.

F5 patches Critical RCE vulnerability (CVE-2020-5902) in BIG-IP configuration utility Read More »

Cisco patches small business switch high risk vulnerability (CVE-2020-3297) and 7 other security issues

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 4, 2020 / Cisco, CVE-2020-3297, Networking, Small Business

Cisco has patched a High severity Cisco small business switch vulnerability (CVE-2020-3297) and 7 other Medium rated issues that affect multiple Cisco products.

Cisco patches small business switch high risk vulnerability (CVE-2020-3297) and 7 other security issues Read More »

Palo Alto Networks patches Critical PAN-OS authentication bypass vulnerability (CVE-2020-2021)

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / June 30, 2020 / authentication, CVE-2020-2021, Firewall, Palo Alto Networks, PAN-OS, SAML

Palo Alto Networks has issued a Critical security advisory for PAN-OS authentication bypass in SAML authentication vulnerability CVE-2020-2021.

Palo Alto Networks patches Critical PAN-OS authentication bypass vulnerability (CVE-2020-2021) Read More »

Netgear fixes high risk vulnerability in multiple routers and network devices

Network Security, Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / June 30, 2020 / 0-day, GRIMM, NETGEAR, R6700, RCE, Router, ZDI, Zero-day

Netgear has released firmware updates to fix a high severity remote code execution (RCE) vulnerability in multiple Netgear routers and other network devices. A remote attacker could exploit to take control of an affected device.

Netgear fixes high risk vulnerability in multiple routers and network devices Read More »

XORDDoS and Kaiji DDoS botnets target internet exposed Docker servers

Configuration Management, Cybersecurity Attacks, Malware, Network Security / Frank Crast / June 23, 2020 / 2375, DDoS, Docker, Kaiji, malware, XORDDoS

Security experts warn malware variants of XORDDoS and Kaiji distributed denial-of-service (DDoS) botnets are targeting exposed Docker servers.

XORDDoS and Kaiji DDoS botnets target internet exposed Docker servers Read More »

Cisco releases Critical Treck IP Stack advisory and 7 other High severity updates

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / June 19, 2020 / Cisco, CVE-2020-11896, CVE-2020-11897, CVE-2020-11898, Ripple20, Treck

Cisco has released a Critical security advisory for three Treck IP Stack vulnerabilities, as well as seven other High severity advisories that affect multiple products.

Cisco releases Critical Treck IP Stack advisory and 7 other High severity updates Read More »

New PoC exploits SMBv3 vulnerability on unpatched systems

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / June 9, 2020 / CERT, CVE-2020-0796, SMB, SMBGhost, SMBv3

A security researcher has developed new proof-of-concept (PoC) code that can exploit an SMBv3 compression remote code execution (RCE) vulnerability CVE-2020-0796 on unpatched Windows systems.

New PoC exploits SMBv3 vulnerability on unpatched systems Read More »

Cisco patches Critical RCE vulnerability in Unified CCX software

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 23, 2020 / Cisco, CVE-2020-3175, CVE-2020-3280, MDS 9000

Cisco patched a Critical RCE vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX). The company also addressed a DoS vulnerability in MDS 9000 Series Switches.

Cisco patches Critical RCE vulnerability in Unified CCX software Read More »

BIND and Microsoft DNS security updates

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 21, 2020 / BIND, CVE-2020-8616, CVE-2020-8617, DNS, ISC, Microsoft

The Internet Systems Consortium (ISC) has released two security updates that fix vulnerabilities on multiple versions of BIND. In addition, Microsoft also issued a new DNS security advisory and workaround. The flaws could allow a remote attacker to exploit and cause a denial of service condition.

BIND and Microsoft DNS security updates Read More »

Cisco patches IOS XE SD-WAN software command injection vulnerability

Network Security, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / May 1, 2020 / Cisco, CVE-2019-16009, CVE-2019-16011, iOS, IOS XE, Networking, SD-WAN

Cisco has released a High severity security update that fixes an IOS XE SD-WAN software command injection vulnerability CVE-2019-16011.

Cisco patches IOS XE SD-WAN software command injection vulnerability Read More »