By michele654 on Monday, 27 November 2023
Category: Vulnerabilities

New Vulnerabilities Monday 27 November


New Alerts for HPE, Arcserve, and Control iD (0-Day).

HPE 

Vulnerabilities in curl have been addressed in OSS Network Utilities (T1204). Highest CVSSv3 score of 9.8
More info.

Arcserve 

Several vulnerabilities in Arcserve UDP allow a remote attacker to upload and execute arbitrary files, and bypass authentication with a valid UUID.
More info. And here.

Control iD 0-Day

An authentication bypass vulnerability exists in Control iD iDSecure that allows a remote attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user. CVSSv3 score of 9.8
More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments