Critical Patches Released for New Flaws in Cisco, Fortinet, VMware Products

🗓️ 08 Feb 2024 05:10:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 107 Views

Critical Patches Released for Cisco, Fortinet, VMwar

Reporter	Title	Published	Views	Family All 167
GithubExploit	Exploit for OS Command Injection in Fortinet Fortisiem	28 May 202417:21	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Fortinet Fortisiem	17 May 202412:07	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Fortinet Fortisiem	20 May 202414:34	–	githubexploit
ATTACKERKB	CVE-2024-23108	5 Feb 202414:15	–	attackerkb
BDU FSTEC	The vulnerability of the FortiSIEM security management software’s programming interface lies in insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary code.	14 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FortiSIEM security management system arises from the failure to take measures to neutralize specific elements, allowing attackers to execute arbitrary commands.	17 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FortiSIEM security management system arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.	7 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the network and application monitoring tool in VMware Aria Operations for Networks, due to deficiencies in access control, allows a malicious actor to elevate their privileges to the root user level.	7 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application software interface of Cisco Expressway Series and Cisco Telepresence VCS devices allows a perpetrator to execute arbitrary commands.	9 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the graphical interface of the FortiSIEM security management system allows a hacker to execute arbitrary commands.	12 Feb 202400:00	–	bdu_fstec

29 May 2024 12:58Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8 - 10

EPSS0.80061

SSVC

cisco fortinet vmware security fixes cve-2024-20252 cve-2024-20254 cve-2024-20255 csrf expressway series vulnerabilities fortisiem bypasses cve-2023-34992 cve-2024-23108 cve-2024-23109 arbitrary code api requests vmware flaws moderate-to-important severity