PT-2020-15889 · Zyxel · Zyxel Utm/Vpn

Name of the Vulnerable Software and Affected Versions: Zyxel UTM and VPN series of gateways versions V4.30 through V4.55 Description: A stack-based buffer overflow in fbwifi continue.cgi allows remote unauthenticated attackers to execute arbitrary code via a crafted HTTP packet. This issue affect...

Check Point Response to CVE-2020-28041 - NAT Slipstreaming

Cause The attack involves several vectors - Local IP disclosure, max MTU UDP and TCP calculation and leveraging a SIP parser weakness in fragmented HTTP packets which enables to "Slipstream" a legitimate SIP connection in an HTTP POST request generated by the victim's browser. The full descriptio...

Insecure Configuration

agent-analyzer is using an insecure configuration. Insecure usage of uninstrumented gateways configs when activating the dynamic configuration feature leads to an insecure deserialization of yaml, subsequently allowing an attacker to execute malicious code...

Feds Sound Alarm Over Emotet Attacks on State, Local Govs

A dramatic uptick in Emotet phishing attacks since July has led the U.S. Cybersecurity and Infrastructure Security Agency CISA to issue a warning that state and local governments need to fortify their systems against the trojan. “This increase has rendered Emotet one of the most prevalent ongoing...

Design/Logic Flaw

A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials...

Black Hat Trip Report – Trend Micro

At Black Hat USA 2020, Trend Micro presented two important talks on vulnerabilities in Industrial IoT IIoT. The first discussed weaknesses in proprietary languages used by industrial robots, and the second talked about vulnerabilities in protocol gateways. Any organization using robots, and any...

DAGOBAH - Open Source Tool To Generate Internal Threat Intelligence, Inventory & Compliance Data From AWS Resources

Dagobah is an open source tool written in python to automate the internal threat intelligence generation, inventory collection and compliance check from different AWS resources. Dagobah collects information and save the state into an elasticsearch index. Dagobah runs into the a LAMBDA and looks a...

AWS Report - A Tool For Analyzing Amazon Resources

AWS Report is a tool for analyzing amazon resources. Install using PIP pip install awsreport Features Search IAM users based on creation date Search buckets public Search security based in rules, default is 0.0.0.0/0 Search elastic ip dissociated Search volumes available Search AMIs with permissi...

This Week in Security News: Robots Running the Industrial World Are Open to Cyber Attacks and Industrial Protocol Translation Gone Wrong

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Based on research that Trend Micro released during Black Hat USA this past week, read about how some industrial robots have flaws that could make them...

CVE-2017-18923

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...

CVE-2017-18923

The vulnerability CVE-2017-18923 affects beroNet VoIP Gateways prior to 3.0.16, where a PHP script can download arbitrary files, including files containing credentials. Sources in connected documents confirm the issue exists across multiple feeds (NVD/NVD-duplicate entries and Red Hat advisory). ...

MustGather: Security Vulnerability issues for API Connect & DataPower Gateways

Problem This document describes the MustGather process for opening a security vulnerability case with IBM Support. How to report a security vulnerability with IBM Support: Before you report a security vulnerability issue with IBM Support, please take the following steps: 1. Test the vulnerability...

Podcast: Securing Railway Systems Against Hacks

Dr. Jesus Molina Railway systems are becoming increasingly digital – from digital signaling systems to remote monitoring functions – and this is opening the door for sophisticated bad actors to launch various malicious cyberattacks. Dr. Jesus Molina, director of Industrial IOT with Waterfall...

Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

RCE-CVE-2020-5902 BIG-IP F5 Remote Code Execution Descripti...

CVE-2020-9075

Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory...

CVE-2020-12714

An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway Virtual Appliances versions 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger Virtual Appliances 1.1.1 through 3.1.1-0. A Diffie-Hellman parameter of insufficient size could allow...

CVE-2020-12713

An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root...

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software, related to uncontrolled resource consumption (exhaustion), allows a intruder to trigger a service failure.

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to uncontrolled resource consumption exhaustion. Exploiting this vulnerability can allow a malicious actor to trigger service failures using specially created packets sent to port 443/tcp...

Crooks Tap Google Firebase in Fresh Phishing Tactic

A series of phishing campaigns using Google Firebase storage URLs have surfaced, showing that cybercriminals continue to leverage the reputation of Google’s cloud infrastructure to dupe victims and skate by secure email gateways. Google Firebase is a mobile and web application development platfor...

Access Control Error Vulnerability in Multiple Emerson Electric Products

Emerson Electric Wireless 1410 Gateway and others are a smart wireless gateway product from Emerson Electric USA. The Emerson Electric Wireless 1410 Gateway version 4.6.43 through 4.7.84, the Wireless 1420 Gateway version 4.6.43 through 4.7.84, and the Wireless 1552WU Gateway version 4.6.43 throu...