Monthly Patches are out for Juniper Networks. New Alerts for Advantech, Mitsubishi Electric, Weintek, Pilz, SICK, IBM, Dell, Apache Tomcat, and Linux.
Advantech
Advantech WebAccess contains an Information Exposure vulnerability that allows a remote attacker to access user credentials. CVSSv3 score of 6.5
More info
Information disclosure, information tampering and authentication bypass vulnerabilities exist in the MELSEC-F Series main modules. A remote attacker may be able to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages. CVSSv3 score of 9.1
More info. And here.
Weintek cMT3000 CMI Web CGI contains Stack-based Buffer Overflow and OS Command Injection vulnerabilities that allow an attacker to hijack control flow and bypass login authentication or execute arbitrary commands. Highest CVSSv3 score of 9.8
More info.
Juniper Monthly Patches are out with 31 bulletins, with 9 rated High and 22 rated Medium. Highest CVSSv3 score of 8.4
More info.
Several Pilz products use CodeMeter Runtime from WIBU, which is affected by two vulnerabilities that allow a remote attacker to gain full control over the system running the software product. Highest CVSSv3 score of 9.8
More info. And here.
Security vulnerabilities exist in SICK APU products that can be exploited by a remote attacker. Highest CVSSv3 score of 8.2
More info.
Vulnerabilities in third-party software affect Robotic Process Automation for Cloud Pak, QRadar SIEM, Db2 REST, Cloud Pak System, Storage Protect for Virtual Environments: Data Protection for VMware, Business Automation Manager Open Editions, Process Mining, Operations Analytics Predictive Insights, QRadar Use Case Manager, Engineering Lifecycle Optimization - Publishing, Jazz Reporting Service. Highest CVSSv3 score of 9.8
More info. And here. And here. And here. And here. And here. And here. And here. And here. And here. And here. And here.
There is a security Update for Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR) for multiple third-party component vulnerabilities. Dell rates this Critical.
More info
Tomcat processed HTTP trailer headers incorrectly, leading to request smuggling. Tomcat has also been fixed for Rapid Reset and an Information Disclosure vulnerability.
More info.
SUSE has updated the kernel. More info.
