CVE-2021-0247 Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.

A Race Condition Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in the firewall process dfwd of Juniper Networks Junos OS allows an attacker to bypass the firewall rule sets applied to the input loopback filter on any interfaces of a device. This issue is...

CVE-2021-0247

CVE-2021-0247 describes a race condition in Juniper Networks Junos OS dfwd (firewall process) that can allow bypass of firewall rules on the input loopback filter across multiple Junos releases (QFX/PTX series; multiple versions across 14.x–19.x). The underlying issue is concurrent execution with...

CVE-2021-0243

CVE-2021-0243 affects Juniper Networks Junos OS on the EX4300, where the firewall policer’s discard action can fail on a Layer 2 port, allowing traffic to pass and be forwarded even when policer limits are exceeded. This impacts IPv4 policing (not IPv6 or firewall policing actions) and can manife...

CVE-2021-0243 Junos OS: EX4300: Stateless firewall policer fails to discard traffic

Improper Handling of Unexpected Data in the firewall policer of Juniper Networks Junos OS on EX4300 switches allows matching traffic to exceed set policer limits, possibly leading to a limited Denial of Service DoS condition. When the firewall policer discard action fails on a Layer 2 port, it wi...

CVE-2021-0235 Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...

CVE-2021-0225 Junos OS Evolved: Stateless IP firewall filter does not work as expected

An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to s...

CVE-2021-0225

CVE-2021-0225 concerns Juniper Networks Junos OS Evolved where an improper check for unusual or exceptional conditions can cause the stateless firewall filter configuration using the policer action to fail to take effect when combined with other options. Affected versions are 19.1R1-EVO and above...

5 Ways Your Software Supply Chain is Out to Get You, Part 2: Exploit Third Party Applications

In Part 1 of this series, we explained how and why our software supply chain transfers an extraordinary amount of risk downstream to the organizations and users that trust and depend on it. We also presented evidence suggesting that 2021 may well be the year of the Software Supply Chain attack...

Logic Flaw Vulnerability in Mingus Web Application Firewall

MingGuard Web Application Firewall is a professional application security protection product that focuses on providing security protection for websites, APPs and other Web business systems, providing multi-dimensional and deep-level security detection and protection for website and APP business...

Logic Flaw Vulnerability in Next Generation Firewall of Ruijie Networks Co.

Ltd. is a service provider that specializes in the research and development, production, sales and service of network communication equipment, and provides network security, routers, switches, firewalls, wireless AP coverage and other network products and business solutions for users. A logic fla...

Arbitrary File Download Vulnerability in Youyou Firewall of Shenzhen Hechen Communication Technology Co.

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Arbitrary File Deletion Vulnerability in Youyou Firewall of Shenzhen Hechen Communication Technology Co.

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Swiss Army knife For Information Security: What is Comprehensive Protection?

Written by Sergey Ozhegov, CEO of SearchInform In the early days of information security, we used to rely on antivirus and firewall in our arsenal. Once I even “caught” a leak with the help of the firewall logs: I noticed an atypically large data upload and found out that the user was uploading...

Logic Flaw Vulnerability in Riptide Networks Next-Generation Firewalls

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A logic flaw vulnerability exists in the next-generation firewall of Ruijie Networks...

Weak Password Vulnerability in DrayTek Vigor2912

The Vigor 2912 is a high-performance firewall router product for small and medium-sized businesses. A weak password vulnerability exists in DrayTek Vigor 2912. An attacker uses a weak password to log into the backend and obtain sensitive information...

OS Command Injection in Security Analytics

Summary The Symantec Security Analytics web UI is susceptible to an OS command injection vulnerability. A remote unauthenticated attacker, who has access to the Security Analytics web UI, can execute arbitrary OS commands on the target with elevated privileges. Affected Products The following...

Command Execution Vulnerability in Youyou Firewall Gateway Management System of Shenzhen Hechen Communication Technology Co.

Shenzhen Hechen Communication Technology Co., Ltd. is a total solution provider of mail, and is also a brand of Shenzhen government's agreed procurement supply. Command execution vulnerability exists in the Youyou Firewall Gateway Management System of Shenzhen Hechen Communication Technology Co...

Delta Industrial Automation COMMGR

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Delta Industrial Automation Equipment: COMMGR Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for remote code execution or cause...

SSRF in Sydent due to missing validation of hostnames

Impact Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. Patches...

Weak password vulnerability in Qixing Tianqing Hanma USG Firewall (CNVD-2021-32769)

Tianqing Hanma USG Firewall is developed based on Qixing ISE unified engine, there is no OEM from third-party functions, and the functions can be split in any combination, which has very little impact on system performance. Adopting multi-core hardware architecture and integrated software design,...