Weak password vulnerability in Huawei Technologies Ltd Secoway USG5150

Secoway-USG5150 is a security gateway product from Huawei Technologies Co. A weak password vulnerability exists in the Huawei Technologies Ltd Secoway USG5150, which can be exploited by attackers to obtain sensitive information...

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

Weak password vulnerability in Tianqing web application security gateway (CNVD-2021-16888)

Tianqing Web Application Security Gateway is a new-generation Web Application Firewall WAF and application delivery network security product developed by Qisda. Tianqing Web Application Security Gateway has a weak password vulnerability, which can be exploited by attackers to obtain sensitive...

Weak Password Vulnerability in Mingguo Security Gateway of Hangzhou Anheng Information Technology Co.

MingGuard Security Gateway builds a next-generation security protection system with full-process defense and integrates traditional firewall, intrusion detection, intrusion prevention system, anti-virus gateway, Internet behavior control, VPN gateway, threat intelligence, and other security modul...

Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products

Zyxel has released a patch to address a critical vulnerability in its firmware concerning a hardcoded, undocumented secret account that could be abused by an attacker to login with administrative privileges and compromise its networking devices. The flaw, tracked as CVE-2020-29583 CVSS score 7.8,...

Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Vulnerability (CNVD-2020-73773)

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A cross-site scripting vulnerability exists in Trend Micro InterScan Web Security Virtual...

Trend Micro InterScan Web Security Virtual Appliance 缓冲区错误漏洞

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Trend Micro Web security gateway that provides dynamic, integrated security for enterprise networks against Web-based threats. A stack buffer overflow vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance 6.5...

Few Remote Access clients that do not support Multi-Factor Authentication (MFA) are able to connect to a Security Gateway even though "Allow older clients" is disabled

...

Weak Password Vulnerability in SG Security Gateway System

Ltd. is a company that provides a full range of network security products, comprehensive security solutions and systematic security operation services for users in the government, operators, finance, energy, Internet, education, healthcare and other industries. A weak password vulnerability exist...

Arbitrary File Download Vulnerability in Mingguo Security Gateway of Hangzhou ACE Information Technology Co.

MingGuard Security Gateway builds a next-generation security protection system with full-process defense and integrates traditional firewall, intrusion detection, intrusion prevention system, anti-virus gateway, Internet behavior control, VPN gateway, threat intelligence, and other security modul...

Check Point Security Gateway Denial of Service (sk161812)

A denial of service DoS vulnerability exists in Checkpoint Security Gateway R80.30 when the Threat Prevention Forensics feature is enabled. An authenticated, local attacker can exploit this issue by implementing a specific copnfiguration of enhanced logging, to cause the system to stop responding...

Huawei NIP6800, Secospace USG6600 and USG9500 Resource Management Error Vulnerability

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. A resource management error vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500, which can ...

Huawei NIP6800, Secospace USG6600 and USG9500 Invalid Pointer Access Vulnerability (CNVD-2020-22007)

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. An invalid pointer access vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500, which can be...

PT-2020-20581 · Avira · Antivirus For Endpoint +7

Name of the Vulnerable Software and Affected Versions: Avira AV Engine versions prior to 8.3.54.138 Antivirus for Endpoint versions prior to 8.3.54.138 Antivirus for Small Business versions prior to 8.3.54.138 Exchange Security Gateway versions prior to 8.3.54.138 Internet Security Suite for...

Predictable TCP sequences generated by Security Gateway in R80.20 / R80.30

...

The vulnerability of Check Point Security Gateway’s security gateway, related to deficiencies in handling exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of Check Point Security Gateway’s security gateway is related to deficiencies in handling exceptional states when the Threat Prevention Forensics feature is enabled. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2019-5275

USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a heap buffer overflow when decoding a certificate, an attacker may exploit the vulnerability by a malicious certificate ...

Integrate Security Testing with GitHub Actions

GitHub Actions GitHub announced their own CI/CD system which is integrated into the user interface and called Github Actions. We added RIPS to the GitHub marketplace which enables you to integrate our leading code analysis directly into your GitHub workflow. It works as a security gateway and fai...

Malicious Activity Over DNS Tunneling

DNS Tunneling is used to pass non-DNS information using DNS messages, which are normally allowed by security devices. Malicious users or malware may use DNS tunnels to bypass inspection by the security gateway...

The vulnerability of Check Point Security Gateway’s security gateway allows attackers to circumvent existing access restrictions and carry out spear-phishing attacks.

The vulnerability of Check Point Security Gateway relates to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and carry out spear-phishing attacks...