CND News and Blog

New Vulnerabilities Friday 22 July

michele654 Vulnerabilities Friday, 22 July 2022 1008 Hits 0 Comments

New Alerts for ICONICS, Johnson Controls, Hitachi, Veritas, WithSecure, and Linux.

ICONICS

ICONICS GENESIS64, Hyper Historian, AnalytiX, IoTWorX, MobileHMI, GraphWorX64, and GenBrokerX64 contain several vulnerabilities that could result in information disclosure, RCE, or DoS. Highest CVSSv3 score of 9.8
More info.

Johnson Controls

Johnson Controls has confirmed a vulnerability impacting Metasys ADS/ADX/OAS with MUI that allows a remote attacker to enumerate users of a Metasys ADS/ADX/OAS with MUI server. CVSSv3 score of 5.3
More info. And here.

Hitachi

A DoS vulnerability exists in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager. CVSSv3 score of 7.5
More info.

Veritas

Veritas has addressed multiple security vulnerabilities impacting Veritas NetBackup, NetBackup Appliance, Flex Appliance, and Flex Scale. Highest CVSSv3 score of 9.9
More info.

WithSecure

DoS vulnerabilities was discovered in F-Secure Atlant and in certain WithSecure products where it is possible to crash the scanning engine. The exploits can be triggered remotely by an attacker.
More info. And here.

Linux

OpenSUSE has updated the kernel. More info.