Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

🗓️ 21 Apr 2023 05:41:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 8 Views

Cisco and VMware patch critical flaws enabling remote code execution in Director and Modeling Labs.

Reporter	Title	Published	Views	Family All 107
zdt	VMware vRealize Log Insight Unauthenticated Remote Code Execution Exploit	11 Sep 202300:00	–	zdt
githubexploit	Exploit for Incorrect Authorization in Vmware Aria_Operations_For_Logs	20 Oct 202314:59	–	githubexploit
bdu_fstec	The vulnerability of the log management tool vRealize Log Insight and the VMware Cloud Foundation virtualization platform lies in their ability to bypass the catalog, allowing attackers to execute arbitrary code.	26 Jan 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the log management tool vRealize Log Insight and the VMware Cloud Foundation virtualization platform, related to access control errors, allows a perpetrator to execute arbitrary code.	27 Jan 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability in the web interface of the Cisco Industrial Network Director software package allows a hacker to execute arbitrary commands.	20 Apr 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the VMware Aria Operations for Logs network log analysis tool arises from errors during deserialization procedures, allowing an attacker to execute arbitrary code with root privileges.	22 Apr 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability in the web interface of the Cisco Industrial Network Director software allows a perpetrator to gain unauthorized access to information.	2 May 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability in the web interface of the Cisco Modeling Labs network modeling tool allows a hacker to gain administrator privileges.	4 May 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the VMware Aria Operations for Logs network log analysis tool is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. This allows attackers to execute arbitrary code with root privileges.	29 May 202300:00	–	bdu_fstec
circl	CVE-2022-31704	25 Jan 202308:13	–	circl

21 Apr 2023 05:41Current

8.6High risk

Vulners AI Score8.6

CVSS 3.19.8 - 9.9

EPSS0.87077

SSVC

Cisco Industrial Network Director Modeling Labs Remote code execution Security updates