New Alerts for HashiCorp, JTEKT, Beckhoff, Atos Unify, and NetApp.
HashiCorp
Vault and Vault Enterprise are vulnerable to DoS through memory exhaustion of the host when handling large unauthenticated and authenticated HTTP requests from a client. CVSSv3 score of 7.5
More info.
Multiple vulnerabilities were found in HMI GC-A2 series that can lead to DoS. CVSSv3 score of 7.5
No patch, network correctly.
More info.
With TwinCAT/BSD based products the HTTPS request to the Authelia login page accepts user-controlled input
that specifies a link to an external site. CVSSv3 score of 4.3
More info.
Multiple vulnerabilities have been identified in Atos Unify IP devices. A remote attacker can enable the Secure Shell feature on the phone by abusing the unauthenticated
WPI interface of the phone. It is possible to set an attacker defined password for the admin user, even if
there was a password defined. CVSSv3 score of 8.8
More info.
NetApp has published 16 new bulletins identifying vulnerabilities in third-party software included in their products. Highest CVSSv3 score of 10
Only 1 has patches.
More info.
Comments