CVE-2017-15524

The CVE-2017-15524 entry concerns Kemp Load Balancer’s Application Firewall Pack (AFP/WAF). A security feature bypass exists where HTTP POST data is not inspected, enabling bypass of the Web Application Firewall. Affected versions are Kemp AFP prior to 7.2.40.1; remediation is upgrading to 7.2.40...

Firewall Bursting: A New Approach to Better Branch Security

One of the most common network security solutions is the branch firewall. Branch firewall appliances can pack into a single device a wide range of security capabilities including a stateful or next-generation firewall, anti-virus, URL filtering, and IDS/IPS. But the reality is that most of these...

Cisco Multiple Product Information Disclosure Vulnerabilities

The Cisco ASA family of security appliances protects corporate networks of all sizes. It enables highly secure data access anytime, anywhere, using any device. The Cisco Application Control Engine Module ACE family for Cisco Catalyst® 6500 provides the highest level of application infrastructure...

Memory leak vulnerability in multiple Huawei firewall products

Huawei USG series products and Secospace USG series are Huawei's new generation of professional intrusion prevention and firewall products for customers in enterprises, IDCs, campus networks and carriers. A memory leakage vulnerability exists in several Huawei firewall products, which can be...

Kemp Load Balancers Security Bypass Vulnerability

Kemp Load Balancer is a load balancing appliance from Kemp Technlogies, Inc.Application Firewall Pack AFP, a.k.a. Web Application Firewall is a Web application firewall component used in... A security bypass vulnerability exists in the AFP component of Kemp Load Balancer versions prior to 7.2.40....

Huawei Secospace USG6600 Memory Access Out-of-Bounds Vulnerability

Huawei Secospace USG6600 is Huawei's 10Gb campus next-generation firewall for medium and large enterprises, organizations and next-generation data centers. The Huawei Secospace USG6600 memory access out-of-bounds vulnerability is due to a lack of program checksum. An authenticated local attacker...

Web Insight Data Not Visible on NetScaler MAS

AppFlow aka Insight has been enabled for the VServer and Services. Enabled Web Insights on NetScaler MAS no data is displayed. Firewall port UDP 4739 is allowed from the NetScaler NSIP/SNIP to the MAS appliance. ULFD was disabled and server was removed...

Kemp Load Balancer WAF 7.2.40 Bypass Vulnerability

Exploit for hardware platform in category web applications 1. ADVISORY SUMMARY Kemp Load Balancers - Module Application Firewall Pack AFP - Web Application Firewall WAF does not inspect HTTP POST data Risk: high Application: Kemp Load Balancers - Module Application Firewall Pack AFP Versions...

VMware Cloud on AWS - Support, Considerations, and Limitations

Challenge VMware Cloud on AWS is an integrated cloud offering developed by AWS and VMware. It requires specific preparation to enable Veeam Backup & Replication to function with it. Apart from the preparation process and the limitations mentioned at the end of this article, you can interact with...

Palo Alto Networks Firewalls - Root Remote Code Execution

This is a public advisory for CVE-2017-15944 which is a remote root code execution bug in Palo Alto Networks firewalls. Three separate bugs can be used together to remotely execute commands as root through the web management interface without authentication on: PAN-OS 6.1.18 and earlier, PAN-OS...

Security Advisory - Memory Leak Vulnerability in Some Huawei FireWall Products

Some Huawei FireWall products have a memory leak vulnerability due to memory don't be released when an local authenticated attacker execute special commands many times. An attacker could exploit it to cause memory leak, which may further lead to system exceptions.Vulnerability ID:...

Security Advisory - Out-of-Bounds Memory Access Vulnerability on Some Huawei FireWall Products

There is an Out-of-Bounds memory access vulnerability in Huawei FireWall products due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service. Vulnerability ID:...

Common Open Policy Service Protocol module buffer error vulnerability in multiple Huawei products

Huawei DP300 and others are products of Huawei, China.Huawei DP300 is a videoconferencing terminal.IPS Module is an intrusion prevention and intrusion detection product.NGFW Module is a firewall product.Common Open Policy Service Protocol COPS is one of the Common Open Policy Service Protocol COP...

Huawei AR3200 and NGFW Module Memory Disclosure Vulnerability

Huawei AR3200 and NGFW Module are both products of Huawei, China.Huawei AR3200 is an AR3200 series enterprise router product.NGFW Module is a firewall product. A memory leak vulnerability exists in the Huawei AR3200 and NGFW Module due to the device failing to reasonably free memory when parsing ...

IKEv2 protocol memory out-of-bounds access vulnerability in multiple Huawei products (CNVD-2017-38286)

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...

The vulnerability of the Smart Network Configuration Manager’s automatic network configuration management system, related to authentication mechanisms that lack sufficient protection, allows attackers to circumvent network firewall restrictions.

The vulnerability of the Smart Network Configuration Manager’s automatic network configuration management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass network firewalls by using a Zebedee client that connects t...

IKEv2 Protocol Memory Leakage Vulnerability in Multiple Huawei Products

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory leak vulnerability exists in the IKEv2...

Murus 1.4.11 - Local Privilege Escalation

I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain the access it needs to modify the firewall settings. I...

Murus 1.4.11 Local Privilege Escalation

I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain the access it needs to modify the firewall settings. I...

Murus 1.4.11 - Local root Privilege Escalation Exploit

Exploit for macOS platform in category local exploits I recently blogged about the prevalence of escalation hijack vulnerabilities amongst macOS applications. One example of this is the latest version of Murus firewall. By design it requires the user to authenticate every time in order to obtain...