CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added two security flaws impacting Palo Alto Networks PAN-OS and SonicWall SonicOS SSLVPN to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The flaws are listed below -...

CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

Extreme Networks IQ Engine security vulnerability

Extreme Networks IQ Engine is an engine by Extreme Networks, Inc. A security vulnerability exists in Extreme Networks IQ Engine versions prior to 10.6r1a and versions prior to 10.6r4 through 10.6r5, which originates from a buffer overflow in the ahwebui service...

Extreme Networks IQ Engine security vulnerability

Extreme Networks IQ Engine is an engine from Extreme Networks, Inc. in the United States. A security vulnerability exists in Extreme Networks IQ Engine versions prior to 10.6r1a and prior to 10.6r4 through 10.6r5, which stems from a buffer overflow in the ahauth service that allows execution of...

CVE-2023-46271

Extreme Networks IQ Engine (versions before 10.6r1a and 10.6r1a through 10.6r4 before 10.6r5) and AP410C network switches are vulnerable to a security flaw in the ah_webui service, which listens on TCP port 3009 by default. The issue stems from a buffer overflow (CWE-120) and deficiencies in auth...

CVE-2023-46272

A stack-based buffer overflow exists in the ah_auth service of Extreme Networks IQ Engine (listening on UDP port 3001 ). The vulnerability occurs due to a lack of proper validation on the length of user-supplied data before it is copied to a fixed-length stack-based buffer. This allows network-ad...

CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

CVE-2023-46272: Stack-based Buffer Overflow

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

CVE-2023-46271: Buffer Copy without Checking Size of Input

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

F5 Networks BIG-IP : OpenSSL vulnerability (K000149304)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000149304 advisory. Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may...

Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication

Juniper Networks has released security updates to address a critical security flaw impacting Session Smart Router, Session Smart Conductor, and WAN Assurance Router products that could be exploited to hijack control of susceptible devices. Tracked as CVE-2025-21589 , the vulnerability carries a...

CVE-2024-47935

Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect Legacy Mode, StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance. This issue affects StellarProtect...

CVE-2024-47935 TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock Improper Validation of Integrity Check Value Vulnerability

Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect Legacy Mode, StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance. This issue affects StellarProtect...

CVE-2024-47935

TXOne Networks' vulnerabilities CVE-2024-47935 affect StellarProtect (Legacy Mode) and StellarEnforce (before 3.2) and Safe Lock (3.0.0–3.1.1076). Root cause: improper validation of an integrity check value, requiring attackers to hijack a DLL to escalate privileges on the victim device. Impacted...

CVE-2024-47935 TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock Improper Validation of Integrity Check Value Vulnerability

Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect Legacy Mode, StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance. This issue affects StellarProtect...

CVE-2024-47935: Improper Validation of Integrity Check Value

Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect Legacy Mode, StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance. This issue affects StellarProtect...

CVE-2025-0110

A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administrator with the ability to make gNMI requests to the PAN-OS management web interface to bypass system restrictions and run arbitrary commands. The commands are run as the...

CVE-2025-0109

An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an unauthenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but doe...