F5 Networks BIG-IP : SSL virtual server vulnerability (K45353544)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.5.9 / 11.6.4 / 12.1.0. It is, therefore, affected by a vulnerability as referenced in the K45353544 advisory. - On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, and 12.0.x, an undisclosed sequence of packets received by an SSL...

F5 Networks BIG-IP : IP Intelligence Feed List TMUI vulnerability (K68151373)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.1 / 12.1.4.1 / 13.1.1.5 / 14.0.0.5 / 14.1.0.6 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K68151373 advisory. - On BIG-IP AFM, ASM 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4,...

F5 Networks BIG-IP : DNS TCP virtual server vulnerability (K44200194)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.3.2 / 13.1.0. It is, therefore, affected by a vulnerability as referenced in the K44200194 advisory. - In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x...

F5 Networks BIG-IP : Apache HTTP server vulnerability (K000132643)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.3 / 16.1.4.2 / 17.1.1.1. It is, therefore, affected by a vulnerability as referenced in the K000132643 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp ...

Turla Updates Kazuar Backdoor with Advanced Anti-Analysis to Evade Detection

The Russia-linked hacking crew known as Turla has been observed using an updated version of a known second-stage backdoor referred to as Kazuar. The new findings come from Palo Alto Networks Unit 42, which is tracking the adversary under its constellation-themed moniker Pensive Ursa. "As the code...

Juniper Junos OS Vulnerability (JSA73148)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73148 advisory. - An Improper Input Validation vulnerability in the VxLAN packet forwarding engine PFE of Juniper Networks Junos OS on QFX5000 Series, EX4600 Series devices allows an...

TunnelCrack Vulnerabilities

SonicWall PSIRT is aware of a research publication that outlines a series of attacks known as 'TunnelCrack' vulnerabilities. These attacks occur when VPN client traffic leaks outside of the secure VPN tunnel, typically happening when clients connect to untrusted networks, like rogue Wi-Fi access...

The vulnerability of the Telnet service of the Extreme Networks Switch Engine (EXOS) operating system, a micro-programmed software for Extreme Networks network switches, allows attackers to enhance their privileges.

The vulnerability of the Telnet service of the Extreme Networks Switch Engine EXOS operating system, a microprogrammed software network switch from Extreme Networks, is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their...

F5 Networks BIG-IP : Multiple Vulnerabilities (K000137353, K000137365)

The version of F5 Networks BIG-IP installed on the remote host is potentially affected by multiple vulnerabilities as referenced in the K000137353 and K000137365 advisories: - K000137353: BIG-IP Configuration utility unauthenticated remote code execution vulnerability CVE-2023-46747 - K000137365:...

Juniper Junos OS Vulnerability (JSA73146)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73146 advisory. - An Improper Input Validation vulnerability in the routing protocol daemon rpd of Juniper Networks allows an attacker to cause a Denial of Service DoS to the device upon...

The Haunted House of IoT: When Everyday Devices Turn Against You

In todays interconnected world, the Internet of Things IoT promises convenience and innovation. From smart fridges that tell you when youre out of milk to connected light bulbs that adjust to your mood, the future seems to be right at our fingertips. What happens when these devices, designed to...

Attackers Exploit VMware’s Aria Operations for Logs Vulnerability

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A critical authentication bypass vulnerability CVE-2023-34051 in VMware Aria Operations for Logs allows remote code execution with root privileges under certain conditions, raising concerns for...

Ubiquiti UniFi: remote code execution via bundled log4j

Background Ubiquiti UniFi is a Management Controller for Ubiquiti Networks UniFi APs. Description A bundled version of log4j could facilitate remote code execution. Please review the CVE identifier referenced below for details. Impact An attacker with permission to modify the logging configuratio...

Aruba Networks ClearPass OnGuard Linux Security Vulnerability

Aruba Networks ClearPass OnGuard Linux is a solution module from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ClearPass OnGuard Linux that originates from the ability to elevate to root privileges on a Linux instance...

Aruba Networks ClearPass Policy Manager SQL Injection Vulnerability

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager, which stems from a web-based management interface that could allow an...

Juniper Junos OS DoS Vulnerability (JSA73174)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73174 advisory. - An Improper Handling of Inconsistent Special Elements vulnerability in the Junos Services Framework jsf module of Juniper Networks Junos OS allows an unauthenticated netwo...

VMWare Aria Operations For Networks SSH Private Key Exposure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/ssh' require 'net/ssh/commandstream' class MetasploitModule 'VMWare Aria Operations for Networks vRealize Network Insight SSH Private Key Exposure',...

VMWare Aria Operations For Networks SSH Private Key Exposure Exploit

VMWare Aria Operations for Networks vRealize Network Insight versions 6.0.0 through 6.10.0 do not randomize the SSH keys on virtual machine initialization. Since the key is easily retrievable, an attacker can use it to gain unauthorized remote access as the "support" root user. This module requir...

The vulnerability of the command-line interface (CLI) of Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2023-28850 · Aruba Networks · Aruba Networks Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba Networks ClearPass Policy Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated remote attacker to conduct SQL injection attacks against the instance. Thi...