CVE-2020-27267

KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity all versions, OPC-Aggregator all versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server v7.68.804 and v7.66, and Software Toolbox TOP Server all 6.x versions, are...

Backdoor in Zyxel Firewalls and Gateways

This is bad: More than 100,000 Zyxel firewalls, VPN gateways, and access point controllers contain a hardcoded admin-level backdoor account that can grant attackers root access to devices via either the SSH interface or the web administration panel. … Installing patches removes the backdoor...

Backdoor account found in 100,000+ Zyxel Firewalls, VPN Gateways

By Deeba Ahmed Researchers have discovered a hard-coded admin-level backdoor account as a Zyxel firmware binary revealing username and password. This is a post from HackRead.com Read the original post: Backdoor account found in 100,000+ Zyxel Firewalls, VPN Gateways...

CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

Design/Logic Flaw

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

CVE-2020-7548

A CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and Wiser Series Gateways see security notification for version information that could allow unauthorized users to login...

CVE-2020-7548

CVE-2020-7548 affects Smartlink, PowerTag, and Wiser Series Gateways. The connected sources describe a CWE-330 vulnerability (Use of Insufficiently Random Values) that could allow unauthorized logins. Details about affected versions, root cause specifics beyond the weak randomness issue, exploita...

CVE-2020-25014

A stack-based buffer overflow in fbwificontinue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet...

PT-2020-15889 · Zyxel · Zyxel Utm/Vpn

Name of the Vulnerable Software and Affected Versions: Zyxel UTM and VPN series of gateways versions V4.30 through V4.55 Description: A stack-based buffer overflow in fbwifi continue.cgi allows remote unauthenticated attackers to execute arbitrary code via a crafted HTTP packet. This issue affect...

Check Point Response to CVE-2020-28041 - NAT Slipstreaming

Cause The attack involves several vectors - Local IP disclosure, max MTU UDP and TCP calculation and leveraging a SIP parser weakness in fragmented HTTP packets which enables to "Slipstream" a legitimate SIP connection in an HTTP POST request generated by the victim's browser. The full descriptio...

Insecure Configuration

agent-analyzer is using an insecure configuration. Insecure usage of uninstrumented gateways configs when activating the dynamic configuration feature leads to an insecure deserialization of yaml, subsequently allowing an attacker to execute malicious code...

Feds Sound Alarm Over Emotet Attacks on State, Local Govs

A dramatic uptick in Emotet phishing attacks since July has led the U.S. Cybersecurity and Infrastructure Security Agency CISA to issue a warning that state and local governments need to fortify their systems against the trojan. “This increase has rendered Emotet one of the most prevalent ongoing...

Design/Logic Flaw

A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message replay. Captured traffic to the ACEView service can be replayed to other gateways sharing the same credentials...

Black Hat Trip Report – Trend Micro

At Black Hat USA 2020, Trend Micro presented two important talks on vulnerabilities in Industrial IoT IIoT. The first discussed weaknesses in proprietary languages used by industrial robots, and the second talked about vulnerabilities in protocol gateways. Any organization using robots, and any...

DAGOBAH - Open Source Tool To Generate Internal Threat Intelligence, Inventory & Compliance Data From AWS Resources

Dagobah is an open source tool written in python to automate the internal threat intelligence generation, inventory collection and compliance check from different AWS resources. Dagobah collects information and save the state into an elasticsearch index. Dagobah runs into the a LAMBDA and looks a...

AWS Report - A Tool For Analyzing Amazon Resources

AWS Report is a tool for analyzing amazon resources. Install using PIP pip install awsreport Features Search IAM users based on creation date Search buckets public Search security based in rules, default is 0.0.0.0/0 Search elastic ip dissociated Search volumes available Search AMIs with permissi...

This Week in Security News: Robots Running the Industrial World Are Open to Cyber Attacks and Industrial Protocol Translation Gone Wrong

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Based on research that Trend Micro released during Black Hat USA this past week, read about how some industrial robots have flaws that could make them...

CVE-2017-18923

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials...

CVE-2017-18923

The vulnerability CVE-2017-18923 affects beroNet VoIP Gateways prior to 3.0.16, where a PHP script can download arbitrary files, including files containing credentials. Sources in connected documents confirm the issue exists across multiple feeds (NVD/NVD-duplicate entries and Red Hat advisory). ...

MustGather: Security Vulnerability issues for API Connect & DataPower Gateways

Problem This document describes the MustGather process for opening a security vulnerability case with IBM Support. How to report a security vulnerability with IBM Support: Before you report a security vulnerability issue with IBM Support, please take the following steps: 1. Test the vulnerability...