Vulnerability Vault

Learn about new vulnerabilities in software, systems, devices, and share new patches, workarounds, and mitigation strategies.

57 Topics
113 Replies

Jasper_The_RasperModerator

posted in Vulnerability Vault

SonicWall warns of a critical CVE-2025-23006 zero-day likely exploited in the wild

January 24, 2025 By Pierluigi Paganini SonicWall warns customers of a critical zero-day vulnerability in SMA 1000 Series appliances, likely exploited in the wild.SonicWall is waring customers of a critical security vulnerability, tracked as CVE-2025-23006 (CVSS score of 9,8) impacting its Secure Mobile Access (SMA) 1000 Series appliances. The vulnerability is a Pre-authentication deserialization of untrusted data issue in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) that has been likely exploited in attacks in the wild as a zero-day.“Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.” reads the advisory. “IMPORTANT: “SonicWall PSIRT has been notified of possible active exploitation of the referenced vulne

101

6 hours ago

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA Adds One Known Exploited Vulnerability to Catalog Release Date January 24, 2025

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization VulnerabilityThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing time

9 hours ago

TripleHelixModerator

posted in Vulnerability Vault

ICS Advisory HMS Networks Ewon Flexy 202 Release Date January 23, 2025

Alert CodeICSA-25-023-06Related topics:Industrial Control System Vulnerabilities, Industrial Control SystemsView CSAF1. EXECUTIVE SUMMARYCVSS v4 6.9 ATTENTION: Low attack complexity Vendor: HMS Networks Equipment: Ewon Flexy 202 Vulnerability: Cleartext Transmission of Sensitive Information2. RISK EVALUATIONSuccessful exploitation of this vulnerability could allow an attacker to disclose sensitive user credentials.3. TECHNICAL DETAILS3.1 AFFECTED PRODUCTSThe following HMS Networks products are affected:Ewon Flexy 202: All versions3.2 VULNERABILITY OVERVIEW3.2.1 Cleartext Transmission of Sensitive Information CWE-319EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage.CVE-2025-0432has been assigned to this vulnerability. A CVSS v3.1 base score of 5.7 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).A CVSS v4 score has also been calculated for CVE-2025-0432. A b

1 day ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

QNAP fixes six Rsync vulnerabilities in NAS backup, recovery app

January 23, 2025 By Sergiu Gatlan QNAP has fixed six rsync vulnerabilities that could let attackers gain remote code execution on unpatched Network Attached Storage (NAS) devices.Rsync is an open-source file synchronization tool that supports direct file syncing via its daemon, SSH transfers via SSH, and incremental transfers that save time and bandwidth.It's widely used by many backup solutions like Rclone, DeltaCopy, and ChronoSync, as well as in cloud and server management operations and public file distribution.The flaws are tracked as CVE-2024-12084 (heap buffer overflow), CVE-2024-12085 (information leak via uninitialized stack), CVE-2024-12086 (server leaks arbitrary client files), CVE-2024-12087 (path traversal via --inc-recursive option), CVE-2024-12088 (bypass of --safe-links option), and CVE-2024-12747 (symbolic link race condition).QNAP says they affect HBS 3 Hybrid Backup Sync 25.1.x, the company's data backup and disaster recovery solution, which supports local, remote,

1 day ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

Subaru Car Vulnerability Lets Hackers Control Millions of Cars Remotely Using Starlink

January 23, 2025 By Balaji N A critical vulnerability in Subaru’s STARLINK connected vehicle service was discovered late last year, exposing millions of vehicles and customer accounts across the United States, Canada, and Japan to potential cyberattacks.Subaru is known for its all-wheel-drive vehicles, high safety ratings, and strong presence in motorsports. Popular models like the Outback and Forester contribute to its top 10 U.S. sales ranking.The security vulnerability allowed attackers to remotely access sensitive vehicle and personal data with minimal information such as a last name and ZIP code, email address, phone number, or license plate. Exploiting the flaw would have enabled malicious actors to:Remotely start, stop, lock, and unlock vehicles. Access real-time vehicle locations and retrieve detailed location histories from the past year. Extract customers’ personally identifiable information (PII), including addresses, billing details (partial credit card information), emerg

1 day ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

Critical Palo Alto Firewall Vulnerabilities Let Hackers Bypass Secure Boot & Exploit Firmware

January 23, 2025 By Balaji N A recent cybersecurity report has identified critical vulnerabilities in Palo Alto Networks firewall devices that could enable attackers to bypass Secure Boot protections, exploit firmware-level flaws, and obtain elevated privileges, allowing them to maintain persistence within the networks of targeted organizations.Eclypsium researchers have revealed findings highlighting the growing threats to security appliances tools specifically designed to protect enterprises from cyber risks.Ironically, attackers are increasingly targeting these devices due to lapses in supply chain security and device integrity, making organizations more vulnerable to breaches. >>Full Article<<

1 day ago

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA Releases Six Industrial Control Systems Advisories Release Date January 23, 2025

CISA released six Industrial Control Systems (ICS) advisories on January 23, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.ICSA-25-023-01 mySCADA myPRO Manager ICSA-25-023-02 Hitachi Energy RTU500 Series Product ICSA-25-023-03 Schneider Electric EVlink Home Smart and Schneider Charge ICSA-25-023-04 Schneider Electric Easergy Studio ICSA-25-023-05 Schneider Electric EcoStruxure Power Build Rapsody ICSA-25-023-06 HMS Networks Ewon Flexy 202CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.This product is provided subject to this Notification and this Privacy & Use policy.VendormySCADA Hitachi Energy Schneider Electric HMS Networks https://www.cisa.gov/news-events/alerts/2025/01/23/cisa-releases-six-industrial-control-systems-advisories

1 day ago

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA Adds One Known Exploited Vulnerability to Catalog Release Date January 23, 2025

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.CVE-2020-11023 JQuery Cross-Site Scripting (XSS) VulnerabilityThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediat

1 day ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

Oracle Patches 200 Vulnerabilities With January 2025 CPU

Oracle has released 318 new security patches to address roughly 200 unique CVEs as part of its January 2025 Critical Patch Update. January 22, 2025 By Ionut Arghire Oracle on Tuesday announced the release of 318 new security patches as part of its January 2025 Critical Patch Update (CPU), including over 180 fixes for vulnerabilities that can be exploited remotely without authentication.SecurityWeek has identified roughly 220 unique CVEs in Oracle’s January 2025 CPU. Approximately 30 of the new security patches resolve critical-severity flaws.For the fourth time in a row, Oracle Communications received the highest number of new patches, at 85. Of the resolved vulnerabilities, 59 can be exploited remotely without authentication.On Tuesday, Oracle also announced the release of 39 new security patches for MySQL, including fixes for four bugs that can be exploited by remote, unauthenticated attackers. >>Full Article<<

2 days ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

‘Severe’ bug in ChatGPT’s API could be used to DDoS websites

The vulnerability, described by a researcher as “bad programming,” allows an attacker to send unlimited connection requests through ChatGPT’s API. January 22, 2025 By Derek B. Johnson Avulnerability in ChatGPT’s API can generate DDoS attacks against targeted websites, but the security researcher who discovered it says the flaw has since been addressed by OpenAI.In a security advisory posted to the developer platform GitHub, German security researcher Benjamin Flesch detailed the bug, which occurs when the API is processing HTTP POST requests to the back-end server.The API is set up to receive hyperlinks in the form of URLs, but in a move Flesch described as “bad programming,” OpenAI did not have a limit on the number of URLs that can be included in a single request. That error allows an attacker to cram thousands of URLs within a single request, something that could overload traffic to a targeted website. >>Full Article<<

2 days ago

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications Release Date January 22, 2025

CISA, in partnership with the Federal Bureau of Investigation (FBI), released Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications. This advisory was crafted in response to active exploitation of vulnerabilities—CVE-2024-8963, an administrative bypass vulnerability; CVE-2024-9379, a SQL injection vulnerability; and CVE-2024-8190 and CVE-2024-9380, remote code execution vulnerabilities—in Ivanti Cloud Service Appliances (CSA) in September 2024.CISA, and the use of trusted third-party incident response data, found that threat actors chained the listed vulnerabilities to gain initial access, conduct remote code execution (RCE), obtain credentials, and implant webshells on victim networks.CISA and FBI strongly encourage network administrators and defenders to upgrade to the latest supported version of Ivanti CSA and to hunt for malicious activity on their networks using the detection methods and indicators of compromise (IOCs) provided in the advisory. All members of

2 days ago

TripleHelixModerator

posted in Vulnerability Vault

Cybersecurity Advisory Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications Release Date January 22, 2025

Alert CodeAA25-022ARelated topics:Organizations and Cyber Safety, Cyber Threats and Advisories, Incident Detection, Response, and Prevention Note: The CVEs in this advisory are unrelated to vulnerabilities (CVE-2025-0282 and CVE-2025-0283) in Ivanti’s Connect Secure, Policy Secure and ZTA Gateways. For more information on mitigating CVE -2025-0282 and CVE-2025-0283, see Ivanti Releases Security Updates for Connect Secure, Policy Secure, and ZTA Gateways.SummaryThe Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) are releasing this joint Cybersecurity Advisory in response to exploitation in September 2024 of vulnerabilities in Ivanti Cloud Service Appliances (CSA): CVE-2024-8963, an administrative bypass vulnerability; CVE-2024-9379, a SQL injection vulnerability; and CVE-2024-8190 and CVE-2024-9380, remote code execution vulnerabilities.According to CISA and trusted third-party incident response data, threat actors chained the listed vul

2 days ago

TripleHelixModerator

posted in Vulnerability Vault

ICS Advisory ZF Roll Stability Support Plus (RSSPlus) Release Date January 21, 2025

Alert CodeICSA-25-021-03Related topics:Industrial Control System Vulnerabilities, Industrial Control SystemsView CSAF1. EXECUTIVE SUMMARYCVSS v4 5.9 ATTENTION: Exploitable from an adjacent network/low attack complexity Vendor: ZF Equipment: RSSPlus Vulnerability: Authentication Bypass By Primary Weakness2. RISK EVALUATIONSuccessful exploitation of this vulnerability could allow an unauthenticated attacker to remotely (proximal/adjacent with RF equipment) call diagnostic functions which could impact both the availability and integrity.3. TECHNICAL DETAILS3.1 AFFECTED PRODUCTSThe following versions of RSSPlus are affected:RSSPlus 2M: build dates 01/08 through at least 01/233.2 VULNERABILITY OVERVIEW3.2.1 AUTHENTICATION BYPASS BY PRIMARY WEAKNESS CWE-305The affected product is vulnerable to an authentication bypass vulnerability targeting deterministic RSSPlus SecurityAccess service seeds, which may allow an attacker to remotely (proximal/adjacent with RF equipment or via pivot from J2497

3 days ago

TripleHelixModerator

posted in Vulnerability Vault

Vulnerability Summary for the Week of January 13, 2025 Released Jan 21, 2025

Document IDSB25-021 The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded in the past week. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores.Vulnerabilities are based on the Common Vulnerabilities and Exposures (CVE) vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:High: vulnerabilities with a CVSS base score of 7.0–10.0 Medium: vulnerabilities with a CVSS base score of 4.0–6.9 Low: vulnerabilities with a CVSS base score of 0.0–3.9Entries may include additional information provided by organizations and efforts sponsored by CISA. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletin is comp

3 days ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

An estimated 46,000 VPN servers are vulnerable to being hijacked

Private routers are also part of the 4 million internet hosts at risk January 21, 2025 By George Phillips (Image credit: Westend61 / Getty Images) VPN servers and private routers are part of over 4 million internet hosts vulnerable to hijack from cybercriminals.Vulnerabilities in multiple tunneling protocols, including IPIP and GRE, allow attackers to gain access to affected internet hosts, perform anonymous attacks, and gain unauthorized network access.It doesn't appear as though any servers belonging to the best VPNs have been affected, but the threat to VPN servers worldwide and people's home routers is concerning.What happened?The vulnerabilities were discovered by Top10VPN alongside security researcher Mathy Vanhoef. A large-scale internet scan identified 4.26 million open tunneling hosts at risk, which included VPN servers, ISP home routers, mobile network gateways, and core internet routers.The type of vulnerability concerns tunneling packets. This is when data is moved from o

3 days ago

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA Releases Twelve Industrial Control Systems Advisories Release Date January 16, 2025

CISA released twelve Industrial Control Systems (ICS) advisories on January 16, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.ICSA-25-016-01 Siemens Mendix LDAP ICSA-25-016-02 Siemens Industrial Edge Management ICSA-25-016-03 Siemens Siveillance Video Camera ICSA-25-016-04 Siemens SIPROTEC 5 Products ICSA-25-016-05 Fuji Electric Alpha5 SMART ICSA-25-016-06 Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products ICSA-25-016-07 Hitachi Energy FOX61x Products ICSA-25-016-08 Schneider Electric Data Center Expert ICSA-24-058-01 Mitsubishi Electric Multiple Factory Automation Products (Update A) ICSA-25-010-03 Delta Electronics DRASimuCAD (Update A) ICSA-24-191-05 Johnson Controls Inc. Software House C●CURE 9000 (Update A) ICSA-24-030-02 Mitsubishi Electric FA Engineering Software Products (Update B)CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigatio

8 days ago

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA Adds One Known Exploited Vulnerability to Catalog Release Date January 16, 2025

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.CVE-2024-50603 Aviatrix Controllers OS Command Injection VulnerabilityThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely

8 days ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

Critical SimpleHelp vulnerabilities fixed, update your server instances!

January 16, 2025 By Zeljka Zorz If you’re an organization using SimpleHelp for your remote IT support/access needs, you should update or patch your server installation without delay, to fix security vulnerabilities that may be exploited by remote attackers to execute code on the underlying host.The vulnerabilitiesSimpleHelp is relatively popular remote support/access software that has also occasionally been used by cyber attackers.The solution is mostly used by technical services firms and organizations’ IT help desk and technical support teams. It uses the Java runtime environment to run its server and client components and, thus, can be run on Windows, macOS or Linux machines.Horizon3.ai researchers have recently probed the software for security weaknesses, and have discovered three vulnerabilities:CVE-2024-57727, an unauthenticated path traversal vulnerability that could allow attackers to download arbitrary files from the SimpleHelp server, including logs and configuration secrets

8 days ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

Nvidia, Zoom, Zyxel Patch High-Severity Vulnerabilities

Nvidia, Zoom, and Zyxel have released patches for multiple high-severity vulnerabilities across their products. January 15, 2025 By Ionut Arghire Nvidia, Zoom, and Zyxel this week announced fixes for multiple high-severity vulnerabilities in their products, urging users to update devices as soon as possible.Nvidia released patches for three security defects in Container Toolkit and GPU Operator for Linux, including two high-severity improper isolation bugs that could be exploited using crafted container images.The first issue, tracked as CVE-2024-0135, could lead to the modification of a host binary, while the second, tracked as CVE-2024-0136, could lead to untrusted code gaining read and write access to host devices.In both cases, successful exploitation could result in code execution, privilege escalation, denial-of-service (DoS), information disclosure, and data tampering, but the second flaw only impacts Container Toolkit deployments that are configured in a nondefault way.Both vul

9 days ago

TripleHelixModerator

posted in Vulnerability Vault

Microsoft January 2025 Security Updates

January 2025 Security UpdatesThis release consists of the following 159 Microsoft CVEs:Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?.NET CVE-2025-21171.NET and Visual Studio CVE-2025-21172.NET CVE-2025-21173.NET, .NET Framework, Visual Studio CVE-2025-21176Visual Studio CVE-2025-21178Microsoft Office Access CVE-2025-21186Power Automate CVE-2025-21187Windows MapUrlToZone CVE-2025-21189Active Directory Federation Services CVE-2025-21193Windows Recovery Environment Agent CVE-2025-21202Windows Connected Devices Platform Service CVE-2025-21207Windows Virtual Trusted Platform Module CVE-2025-21210Windows Boot Loader CVE-2025-21211Windows BitLocker CVE-2025-21213Windows BitLocker CVE-2025-21214Windows Boot Manager CVE-2025-21215Windows Mark of the Web (MOTW) CVE-2025-21217Windows Kerberos CVE-2025-21218Windows MapUrlToZone CVE-2025-21219Windows Message Queuing CVE-2025-21220Windows Telephony Service CVE-2025-21223Line Printer Daemon Service (LPD) CVE-2025-21224

10 days ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

CISA Warns of Second BeyondTrust Vulnerability Exploited in Attacks

Attackers have been exploiting a second vulnerability in BeyondTrust’s remote management solutions, CISA warns. January 14, 2025 By Ionut Arghire The US cybersecurity agency CISA is urging federal agencies to patch a second vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) enterprise solutions, based on evidence of active exploitation.Tracked as CVE-2024-12686, the flaw is a medium-severity command injection issue that was discovered during BeyondTrust’s investigation into the compromise of a limited number of customer RS SaaS instances, including one associated with the US Department of Treasury.The attack on the US Treasury was disclosed on December 31 and was attributed to Chinese hackers. The state-sponsored threat actor known as Silk Typhoon was reportedly responsible for the intrusion. >>Full Article<<

10 days ago

Vulnerability Vault

Vulnerable Moxa devices expose industrial networks to attacks

Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vuln...

Log4j Aftermath: Lessons Learned and Steps Forward for the Community an...