Cisco Multiple Product Information Disclosure Vulnerabilities

The Cisco ASA family of security appliances protects corporate networks of all sizes. It enables highly secure data access anytime, anywhere, using any device. The Cisco Application Control Engine Module ACE family for Cisco Catalyst® 6500 provides the highest level of application infrastructure...

Memory leak vulnerability in multiple Huawei firewall products

Huawei USG series products and Secospace USG series are Huawei's new generation of professional intrusion prevention and firewall products for customers in enterprises, IDCs, campus networks and carriers. A memory leakage vulnerability exists in several Huawei firewall products, which can be...

Kemp Load Balancers Security Bypass Vulnerability

Kemp Load Balancer is a load balancing appliance from Kemp Technlogies, Inc.Application Firewall Pack AFP, a.k.a. Web Application Firewall is a Web application firewall component used in... A security bypass vulnerability exists in the AFP component of Kemp Load Balancer versions prior to 7.2.40....

Huawei Secospace USG6600 Memory Access Out-of-Bounds Vulnerability

Huawei Secospace USG6600 is Huawei's 10Gb campus next-generation firewall for medium and large enterprises, organizations and next-generation data centers. The Huawei Secospace USG6600 memory access out-of-bounds vulnerability is due to a lack of program checksum. An authenticated local attacker...

Web Insight Data Not Visible on NetScaler MAS

AppFlow aka Insight has been enabled for the VServer and Services. Enabled Web Insights on NetScaler MAS no data is displayed. Firewall port UDP 4739 is allowed from the NetScaler NSIP/SNIP to the MAS appliance. ULFD was disabled and server was removed...

Kemp Load Balancer WAF 7.2.40 Bypass Vulnerability

Exploit for hardware platform in category web applications 1. ADVISORY SUMMARY Kemp Load Balancers - Module Application Firewall Pack AFP - Web Application Firewall WAF does not inspect HTTP POST data Risk: high Application: Kemp Load Balancers - Module Application Firewall Pack AFP Versions...

VMware Cloud on AWS - Support, Considerations, and Limitations

Challenge VMware Cloud on AWS is an integrated cloud offering developed by AWS and VMware. It requires specific preparation to enable Veeam Backup & Replication to function with it. Apart from the preparation process and the limitations mentioned at the end of this article, you can interact with...

Palo Alto Networks Firewalls - Root Remote Code Execution

This is a public advisory for CVE-2017-15944 which is a remote root code execution bug in Palo Alto Networks firewalls. Three separate bugs can be used together to remotely execute commands as root through the web management interface without authentication on: PAN-OS 6.1.18 and earlier, PAN-OS...

Security Advisory - Memory Leak Vulnerability in Some Huawei FireWall Products

Some Huawei FireWall products have a memory leak vulnerability due to memory don't be released when an local authenticated attacker execute special commands many times. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.Vulnerability ID:...

Security Advisory - Out-of-Bounds Memory Access Vulnerability on Some Huawei FireWall Products

There is an Out-of-Bounds memory access vulnerability in Huawei FireWall products due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service. Vulnerability ID:...

Huawei AR3200 and NGFW Module Memory Disclosure Vulnerability

Huawei AR3200 and NGFW Module are both products of Huawei, China.Huawei AR3200 is an AR3200 series enterprise router product.NGFW Module is a firewall product. A memory leak vulnerability exists in the Huawei AR3200 and NGFW Module due to the device failing to reasonably free memory when parsing ...

Common Open Policy Service Protocol module buffer error vulnerability in multiple Huawei products

Huawei DP300 and others are products of Huawei, China.Huawei DP300 is a videoconferencing terminal.IPS Module is an intrusion prevention and intrusion detection product.NGFW Module is a firewall product.Common Open Policy Service Protocol COPS is one of the Common Open Policy Service Protocol COP...

IKEv2 protocol memory out-of-bounds access vulnerability in multiple Huawei products (CNVD-2017-38286)

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...

The vulnerability of the Smart Network Configuration Manager’s automatic network configuration management system, related to authentication mechanisms that lack sufficient protection, allows attackers to circumvent network firewall restrictions.

The vulnerability of the Smart Network Configuration Manager’s automatic network configuration management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass network firewalls by using a Zebedee client that connects t...

IKEv2 Protocol Memory Leakage Vulnerability in Multiple Huawei Products

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory leak vulnerability exists in the IKEv2...

Murus 1.4.11 - Local Privilege Escalation

I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain the access it needs to modify the firewall settings. I...

Murus 1.4.11 Local Privilege Escalation

I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain the access it needs to modify the firewall settings. I...

Murus 1.4.11 - Local root Privilege Escalation Exploit

Exploit for macOS platform in category local exploits I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain...

Murus 1.4.11 - Local Privilege Escalation

Murus 1.4.11 - Local Privilege Escalation I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain the access i...

Randy Bias joins Wallarm board of advisers

Menlo Park, California — December 5, 2017 — Wallarm today announced that Randy Bias, Vice President of Technology and Strategy, Cloud Software at Juniper and founder of Cloudscaling acquired by EMC, has joined Wallarm’s board of advisers. “Randy is an agile cloud pioneer and a thought leader in...