Cisco Expressway Series Access Control Vulnerability

Cisco Expressway is a powerful gateway solution that gives users outside your firewall simple, highly secure access to all collaborative work. An information disclosure vulnerability exists in the TURN server component in Cisco Expressway Software versions prior to X12.6.3. The vulnerability stem...

PT-2020-4946

Name of the Vulnerable Software and Affected Versions: Cisco Expressway software affected versions not specified Description: A vulnerability in the Traversal Using Relays around NAT TURN server component could allow an unauthenticated, remote attacker to bypass security controls and send network...

New NAT/Firewall Bypass Attack Lets Hackers Access Any TCP/UDP Service

A new research has demonstrated a technique that allows an attacker to bypass firewall protection and remotely access any TCP/UDP service on a victim machine. Called NAT Slipstreaming, the method involves sending the target a link to a malicious site or a legitimate site loaded with malicious ads...

2020 DDoS Extortion Campaign -- A Sequel More Thrilling Than the Original

Costarring Susan McReynolds and Tom Emmons As you might imagine, as the go-to enterprise DDoS mitigation experts, our phones have been "ringing off the hook" as the global extortion DDoS campaign sequel rages on. It's bigger, badder, and features a broader cast of criminal characters than seen...

CVE-2020-27611

BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint...

CVE-2020-27611

BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint...

Code injection

BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint...

CVE-2020-27611

BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint...

CVE-2020-27611

BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint...

CVE-2020-27611

CVE-2020-27611 affects BigBlueButton up to version 2.2.28 . The issue, described across sources, is that BigBlueButton uses STUN/TURN resources from a third party, which may represent an unintended endpoint. The publicly provided documents do not specify a concrete root cause in code, a CVE-preci...

CVE-2020-27611: Use of a Broken or Risky Cryptographic Algorithm

BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint...

PT-2020-16721

Name of the Vulnerable Software and Affected Versions BigBlueButton versions 2.2.8 through 2.2.28 Description The issue concerns BigBlueButton using STUN/TURN resources from a third party, potentially representing an unintended endpoint. There is no information provided about the estimated number...

CVE-2020-11805

Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN...

CVE-2020-11805

Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN...

Design/Logic Flaw

Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN...

CVE-2020-11805

Technical details of CVE-2020-11805 are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.

CVE-2020-11805

Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN...

CVE-2020-11805: Improper Input Validation

Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN...

PT-2020-12858

Name of the Vulnerable Software and Affected Versions Pexip Reverse Proxy and TURN Server versions prior to 6.1.0 Description The issue is related to incorrect UDP access control via TURN. Recommendations For versions prior to 6.1.0, update to version 6.1.0 or later to resolve the issue...

Cisco Meetings App Authorization Issues Vulnerability

Cisco Meetings App is a video conferencing application from Cisco USA. An authorization issue vulnerability exists in the API subsystem in Cisco Meetings App, which stems from a flaw in the protection mechanism for TURN server credentials. A remote attacker can exploit this vulnerability by...