How the FBI Got Into the San Bernardino Shooter’s iPhone

Plus: Russian sanctions, Europe’s SolarWinds fallout, and more of this week’s top security news...

Weak Password Vulnerability in H3C Switch S5120-28P-HPWR-SI Management Platform

Xinhua San Technologies Co., Ltd. has a full range of overall digital infrastructure capabilities in computing, storage, networking, 5G, security, etc., and provides one-stop digital solutions including cloud computing, big data, artificial intelligence, industrial internet, information security,...

Weak Password Vulnerability in ER3200G2 System Management

The scope of business of Xinhua San Technology Co., Ltd. includes: technology development, technical services, technical consulting, transfer of achievements, production, sales: electronic products, software, data communication equipment, broadband access equipment, network security equipment,...

Information Leakage Vulnerability in Web-based Network Management System of Xinhua San Technologies Co.

Xinhua San Technology Co., Ltd. is committed to becoming a trusted partner for customers' business innovation and digital transformation. An information leakage vulnerability exists in the web-based network management system of Xinhua San Technologies Limited, which can be exploited by attackers ...

Unauthorized Access Vulnerability in web-based network management system of Xinhua San Technologies Co.

Xinhua San Technology Co., Ltd. is committed to becoming a trusted partner for customers' business innovation and digital transformation. An unauthorized access vulnerability exists in the web-based network management system of Xinhua San Technologies Limited, which can be exploited by attackers ...

Security Bulletin: Vulnerability in the Fabric OS used by IBM b-type SAN directors and switches.

Summary Brocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric mode contain a weakness in the ldap implementation . Vulnerability Details CVEID: CVE-2020-15376 DESCRIPTION: Broadcom Brocade Fabric OS could allow a remote attacker to bypass security...

Weak Password Vulnerability in ER5200G2, ER3100G2, ER3260G2 of Xinhua San Technologies Co.

ER5200G2, ER3100G2, ER3260G2 are the new generation of high-performance enterprise routers launched by Xinhua San Technologies Co. A weak password vulnerability exists in the ER5200G2, ER3100G2, ER3260G2 of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive...

Weak Password Vulnerability in H3C NER324

H3C NER324 is a new-generation enterprise-grade Gigabit high-performance router launched by Xinhua San Technologies Co. It is targeted at the market of Internet cafes, sing-along bars, digital movie theaters and other cultural industries. The H3C NER324 suffers from a weak password vulnerability...

Weak Password Vulnerability in Various Products of Xinhua San Technologies Co.

The ER5100 is a high-performance Gigabit downstream router. the ER5200G2 is a next-generation enterprise-class Gigabit high-performance router. the GR5200 is a next-generation high-performance enterprise-class router. A weak password vulnerability exists in various products of Xinhua San...

Weak Password Vulnerability in WX2560H of Xinhua San Technologies Co.

WX2560H is a gateway-type wireless controller independently developed by Xinhua San Technologies Co. A weak password vulnerability exists in the WX2560H of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Various H3C MSR Series Routers

The MSR series router is an enterprise router from Xinhua San Technologies Co. A weak password vulnerability exists in various H3C MSR series routers, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Multiple Wireless Controller Products of Xinhua San Technologies Co.

H3C WX3510H, H3C WX2510H, H3C WX3508H, H3C WX3540H are wireless controllers from Xinhua San Technology Co. A weak password vulnerability exists in several wireless controller products of Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in WX2540H of Xinhua San Technologies Co.

The WX2540H is a wireless controller. A weak password vulnerability exists in the WX2540H of Xinhua San Technologies Limited, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in WX3520H of Xinhua San Technologies Co.

The WX3520H is an enterprise-class operational wireless controller. A weak password vulnerability exists in the WX3520H of Xinhua San Technologies Limited, which can be exploited by an attacker to obtain sensitive information...

VMware Carbon Black Ranks Among Top 10 of 100 Cybersecurity Companies by the University of San Diego

We are proud to announce that VMware Carbon Black has been ranked within the top 10 organizations on the University of San Diego Cybersecurity Team’s annual list of the Top 100 Cybersecurity Companies of 2020. The annual list of cybersecurity companies highlights the most influential players in a...

Weak password vulnerability in ER3260G2 system administration (CNVD-2021-22501)

ER3260G2 is a new generation of enterprise-grade Gigabit high-performance router from Xinhua San Technologies Co. A weak password vulnerability exists in the system management of ER3260G2, which can be exploited by attackers to obtain sensitive information...

Authorization Bypass

github.com/spiffe/spire is vulnerable to authorization bypass. The vulnerability exists as requests made to the FetchX509SVID RPC can issue a X.509 certificate with a URI SAN for a SPIFFE ID to an unauthorized agent...

CVE-2021-27098

In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 certificate with a URI SAN for a SPIFFE ID that the agent is not authorized to...

CVE-2021-27098

SPIRE contains an authorization bypass vulnerability in the Legacy Node API FetchX509SVID path. Specifically, before versions 0.8.5, and prior to 0.9.4, 0.10.2, 0.11.3, and 0.12.1, specially crafted requests could cause the server to issue an X.509 certificate with a URI SAN for a SPIFFE ID that ...

Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.

Summary Public disclosed OpenSSL vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches. Vulnerability Details CVEID: CVE-2020-1968 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a Raccoon attack in the TLS specification. By...