CISA Warns of Actively Exploited D-Link Router Vulnerabilities - Patch Now

🗓️ 17 May 2024 06:43:00Reported by The Hacker NewsType

CISA warns of D-Link router vulnerabilities - patch now. Ivanti EPMM also affecte

Reporter	Title	Published	Views	Family All 91
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Ivanti Connect_Secure	9 Feb 202414:31	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Ivanti Endpoint_Manager_Mobile	15 May 202411:20	–	githubexploit
ICS	Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways	29 Feb 202412:00	–	ics
Akamai Blog	Scanning Activity for CVE-2024-22024 (XXE) Vulnerability in Ivanti	14 Feb 202406:00	–	akamaiblog
ATTACKERKB	CVE-2014-100005	13 Jan 201500:00	–	attackerkb
ATTACKERKB	CVE-2024-22024	13 Feb 202400:00	–	attackerkb
ATTACKERKB	CVE-2021-40655	24 Sep 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of the microprogrammed software of the D-Link DIR-605L B2 network device, related to insufficient protection of registration data, allows a intruder to gain unauthorized access to the protected information.	25 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ivanti Connect Secure (previously known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons for Zero Trust Access (nZTA) – tools for authentication and access control – stems from incorrect restrictions on XML links to external objects. This allows attackers to gain unauthorized access to protected information.	14 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of D-Link DIR-600 router’s microprogramming software, related to the manipulation of inter-site requests, allows a hacker to increase their privileges.	21 May 202400:00	–	bdu_fstec