Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services

Cisco is warning about a global surge in brute-force attacks targeting various devices, including Virtual Private Network VPN services, web application authentication interfaces, and SSH services, since at least March 18, 2024. "These attacks all appear to be originating from TOR exit nodes and a...

Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentials

Cisco Talos would like to acknowledge Anna Bennett and Brandon White of Cisco Talos and Phillip Schafer, Mike Moran, and Becca Lynch of the Duo Security Research team for their research that led to the identification of these attacks. Cisco Talos is actively monitoring a global increase in...

Exploit for Deserialization of Untrusted Data in Articatech Artica_Proxy

CVE-2024-2054 Artica-Proxy administrative web application inse...

CVE-2024-22398

An improper Limitation of a Pathname to a Restricted Directory Path Traversal vulnerability in SonicWall Email Security Appliance could allow a remote attacker with administrative privileges to conduct a directory traversal attack and delete arbitrary files from the appliance file system...

Path traversal

An improper Limitation of a Pathname to a Restricted Directory Path Traversal vulnerability in SonicWall Email Security Appliance could allow a remote attacker with administrative privileges to conduct a directory traversal attack and delete arbitrary files from the appliance file system...

CVE-2024-22398

The CVE-2024-22398 entry describes a Path Traversal vulnerability in SonicWall Email Security Appliance. An attacker with administrative privileges can perform a directory traversal to delete arbitrary files from the appliance file system. Root cause: improper limitation of a pathname to a restri...

CVE-2024-22398

An improper Limitation of a Pathname to a Restricted Directory Path Traversal vulnerability in SonicWall Email Security Appliance could allow a remote attacker with administrative privileges to conduct a directory traversal attack and delete arbitrary files from the appliance file system...

CVE-2024-22398

An improper Limitation of a Pathname to a Restricted Directory Path Traversal vulnerability in SonicWall Email Security Appliance could allow a remote attacker with administrative privileges to conduct a directory traversal attack and delete arbitrary files from the appliance file system...

SonicWALL Email Security Appliance Path Traversal Vulnerability

The SonicWALL Email Security Appliance is an email security appliance from SonicWALL, Inc. A path traversal vulnerability exists in the SonicWALL Email Security Appliance that stems from the presence of path traversal, which could allow a remote attacker with administrative privileges to conduct ...

PT-2024-19390 · Sonicwall · Sonicwall Email Security Appliance

Name of the Vulnerable Software and Affected Versions: SonicWall Email Security Appliance affected versions not specified Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a Path Traversal vulnerability. This could allow a remote...

SonicWALL SonicOS Cross-Site Scripting Vulnerability

SonicWALL SonicOS is a suite of operating systems from SonicWALL, Inc. designed for use with SonicWall firewall appliances. A cross-site scripting vulnerability exists in SonicWALL SonicOS that stems from the presence of cross-site scripting that allows an authenticated, remote attacker to store...

SonicWall Secure Mobile Access < 10.2.1.11-65sv (SNWLID-2024-0001)

The version of SonicWall Secure Mobile Access installed on the remote host is prior to 10.2.1.11-65sv. It is, therefore, affected by a vulnerability as referenced in the SNWLID-2024-0001 advisory. - Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office...

SonicWALL SMA100 Authorization Issues Vulnerability

The SonicWALL SMA100 is a security access gateway device from SonicWALL, Inc. An authorization issue vulnerability exists in SonicWALL SMA100 10.2.1.10-62SV and prior versions, which stems from the presence of an access control error vulnerability. An attacker could exploit the vulnerability to...

SMA100 MFA Improper Access Control Vulnerability

Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated attacker to associate another user's MFA mobile application.There is no evidence that these vulnerabilities are being...

Vulnerability fixed in SonicWall SSL-VPN products

SonicWall has fixed a vulnerability in SMA 100 series SSL VPNs. An authenticated malicious party can exploit the vulnerability exploit the vulnerability to establish a link to the mobile MFA device of another user and thus potentially gain access to sensitive data in the victim's context. SonicWa...

SonicWall SonicOS Buffer Overflow (SNWLID-2022-0003)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a buffer overflow vulnerability. A Stack-based buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service DoS, which could...

SonicWall SonicOS Authorization Issues Vulnerability

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. An authorization issue vulnerability exists in SonicWall SonicOS version 7.1.1-7040 that stems from incorrect authentication. A remote attacker could exploit the vulnerability by...

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...

Authentication flaw

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...