New Alerts for Sewio, InHand Networks, SAUTER, Microsoft Edge, IBM, NetApp, and Linux.
Sewio
RTLS Studio contains multiple vulnerabilities, including Use of Hard-coded Password, OS Command Injection, Out-of-bounds Write, Cross-Site Request Forgery, Improper Input Validation, and Cross-site Scripting. Highest CVSSv3 score of 10.
More info.
Multiple vulnerabilities impact Industrial Routers IR302 and IR615-S, including MQTT command injection, unauthorized disclosure of sensitive device information, and RCE. Highest CVSSv3 score of 10.
More info. And here. And here.
SAUTER Controls Nova 200–220 Series (PLC 6) contains two vulnerabilities, Missing Authentication for Critical Function and Cleartext Transmission of Sensitive Information. Highest CVSSv3 score of 9.8
SAUTER reports this equipment is EOL, discontinued 2016. No patches.
More info.
Microsoft has updated Edge to fix the latest security vulnerabilities in Chromium.
More info.
IBM Cloud Pak for Data and IBM Cloud Pak for Security contain vulnerabilities in third-party software. Highest CVSSv3 score of 9.8
More info. And here. And here.
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in cURL libcurl. CVSSv3 score of 9.8
More info.
NetApp has published 8 new bulletins identifying vulnerabilities in third-party software included in their products. Highest CVSSv3 score of 9.1
Patches are available for 4 of them.
More info.
Ubuntu has updated the kernel. More info.
Comments