Sophos UTM Webadmin remote command execution

Added: 08/27/2021 Background Sophos UTM is a network security appliance. Problem A vulnerability in the Webadmin interface allows remote attackers to execute arbitrary commands by sending a specially crafted POST request. Resolution Upgrade to Sophos SG UTM v9.511 MR11, v9.607 MR7, or v9.705 MR5 ...

Vulnerabilities fixed in Sophos UTM Up2Date

Sophos has fixed multiple vulnerabilities in Up2Date for Sophos UTM. A malicious party could potentially abuse it to cause a Denial-of-Service or to perform a execute a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visi...

CVE-2021-25273

Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706...

CVE-2021-25273

Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706...

Cross site scripting

Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706...

CVE-2021-25273

CVE-2021-25273 is a stored XSS affecting Sophos UTM prior to version 9.706, exploitable in the quarantined email details view from the admin perspective. The root cause is a stored XSS flaw that allows an attacker to execute script in an administrator’s browser. Multiple connected sources confirm...

CVE-2021-25273

Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706...

Sophos UTM 跨站脚本漏洞

Sophos UTM is a next-generation firewall. A security vulnerability exists in Sophos UTM versions prior to 9.706. The vulnerability stems from stored XSS that can be executed as an administrator in the quarantine email details view...

Weak password vulnerability in Huawei USG5530

Huawei's USG5530 is a next-generation firewall/UTM United Threat Management appliance designed for large and medium-sized enterprise organizations and data centers. The Huawei USG5530 suffers from a weak password vulnerability, which can be exploited by an attacker to log into the backend and...

CVE-2021-0249

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to...

CVE-2021-0249

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to...

CVE-2021-0249 Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to...

CVE-2021-0249

CVE-2021-0249 is a buffer overflow in Juniper Networks Junos OS Packet Forwarding Engine (PFE) on SRX Series devices. Affected releases include SRX Series: 15.1X49 prior to 15.1X49-D190; 17.4 prior to 17.4R2-S9; 17.4R3 and later prior to 18.1R3-S9; 18.2 prior to 18.2R3-S1; 18.3 prior to 18.3R2-S3...

Rockwell Automation Allen-Bradley Micrologix 1100

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: Allen-Bradley MicroLogix 1100 Vulnerability: Improper Handling of Length Parameter Inconsistency 2. RISK EVALUATION Successful exploitation of this vulnerability...

CVE-2020-25014

A stack-based buffer overflow in fbwificontinue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet...

Stack overflow

A stack-based buffer overflow in fbwificontinue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet...

CVE-2020-25014

CVE-2020-25014 affects Zyxel UTM and VPN gateways (firmware V4.30–V4.55) with a stack-based buffer overflow in fbwifi_continue.cgi that enables remote unauthenticated arbitrary code execution via a crafted HTTP packet. Connected sources corroborate the affected product scope and vulnerable compon...

CVE-2020-25014

A stack-based buffer overflow in fbwificontinue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet...

Zyxel UTM and Zyxel Gateway VPN series Buffer Error Vulnerability

Welkin Technology Zyxel UTM is a unified threat management appliance from Welkin Technology, China. Welkin Technologies Zyxel Gateway VPN series is a series of VPN routers from Welkin Technologies, China that provide secure access. VPNs supported by this router include IPSec, L2TP over IPSec, PPT...

PT-2020-15889 · Zyxel · Zyxel Utm/Vpn

Name of the Vulnerable Software and Affected Versions: Zyxel UTM and VPN series of gateways versions V4.30 through V4.55 Description: A stack-based buffer overflow in fbwifi continue.cgi allows remote unauthenticated attackers to execute arbitrary code via a crafted HTTP packet. This issue affect...