Configure the Default Policies of nftables to DROP Properly

For security purposes, the nftables base chains INPUT, OUTPUT, and FORWARD are similar to those of iptables. You need to configure the DROP policy for all packets, and then add the ACCEPT policy to the base chains to open related services and ports. If the base chains are not configured or the ho...

Configure the iptables Policies for Loopback Properly

The loopback address 127.0.0.0/8 is a special address on a server. It is irrelevant to NICs and is mainly used for the inter-process communication of a local device. Packets with the source address 127.0.0.0/8 from NICs should be discarded. If policies related to the loopback address are improper...

F5 Networks BIG-IP : TMM vulnerability (K000150668)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.2.2. It is, therefore, affected by a vulnerability as referenced in the K000150668 advisory. When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkern...

F5 Networks BIG-IP : BIG-IP APM PingAccess vulnerability (K000150598)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2.2 / BIGIP-15.1.10.7.0.4.5-ENG. It is, therefore, affected by a vulnerability as referenced in the K000150598 advisory. When a BIG-IP APM PingAccess profile is configured on a virtual server, undisclosed...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A code issue vulnerability exists in the F5 BIG-IP that stems from a SIP MRF ALG configuration that results in TMM termination...

PT-2025-20309 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions affected versions not specified Description: The issue occurs when a Session Initiation Protocol SIP message routing framework MRF application layer gateway ALG profile is configured on a Message Routing virtual server. In...

F5 BIG-IP PEM 缓冲区错误漏洞

F5 BIG-IP PEM is a policy enforcer used in BIG-IP from F5 USA. A buffer error vulnerability exists in F5 BIG-IP PEM that originates from URL categorization leading to TMM termination...

F5 Networks BIG-IP : BIG-IP HTTP vulnerability (K000139571)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000139571 advisory. When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests c...

F5 Networks BIG-IP : BIG-IP HTTP/2 vulnerability (K000140968)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / Hotfix- BIGIP-15.1.10.7.0.4.5-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000140968 advisory. When HTTP/2 client and server profiles are simultaneously configured on a...

PT-2025-20308 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: The issue occurs when connection mirroring is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management Microkernel TMM to terminate in the standby BIG-IP...

F5 BIG-IP 缓冲区错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A buffer error vulnerability exists in F5 BIG-IP that stems from a connection mirroring configuration that causes the standby system TMM to...

PT-2025-20275 · Cisco · Cisco Catalyst Center

Name of the Vulnerable Software and Affected Versions: Cisco Catalyst Center affected versions not specified Description: A vulnerability in the management API could allow an unauthenticated, remote attacker to read and modify the outgoing proxy configuration settings. This issue is due to the la...

Configure Proper Policies for OUTPUT of iptables

There are two occasions in which a server sends outgoing packets: 1. The local host process proactively connects to an external server, for example, performing an HTTP access, or sending data to a log server. 2. The local host responds to the external access to the local services. If no policy is...

Configure Proper Policies for OUTPUT of nftables

There are two occasions in which a server sends outgoing packets: 1. The local host process proactively connects to an external server, for example, performing an HTTP access, or sending data to a log server. 2. The local host responds to the external access to the local services. If no policy is...

Configure the nftables Policies for Loopback Properly

The loopback address 127.0.0.0/8 is a special address on a server. It is irrelevant to NICs and is mainly used for the inter-process communication of a local device. Packets with the source address 127.0.0.0/8 from NICs should be discarded. If policies related to the loopback address are improper...

F5 Networks BIG-IP : BIG-IP PEM vulnerability (K000149952)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2.2 / BIGIP-15.1.10.7.0.4.5-ENG. It is, therefore, affected by a vulnerability as referenced in the K000149952 advisory. When a BIG-IP PEM system is licensed with URL categorization, and the URL categorizatio...

F5 Networks BIG-IP : BIG-IP SIP ALG profile vulnerability (K000140937)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / BIGIP-15.1.10.7.0.4.5-ENG. It is, therefore, affected by a vulnerability as referenced in the K000140937 advisory. When a Session Initiation Protocol SIP message routing framework MRF application layer...

CVE-2025-47419 Non-Secure Access

Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from...

CVE-2025-47419 Non-Secure Access

Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from...

CVE-2025-47419

Crestron Automate VX contains a vulnerability (CVE-2025-47419) where Web UI and API access over non-secure ports allows cleartext transmission of sensitive information, including passwords. Affected firmware ranges are 5.6.8161.21536 through 6.4.0.49. The issue originates from transmitting sensit...