Monthly Patches are out for Juniper Networks. New Alerts for Cisco, Apple (Exploit). Dell, SonicWall, Setelsa Security, NETGEAR, vm2, Wireshark, and Linux.
Cisco
A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow a remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance. CVSSv3 score of 9.1
More info.
Apple has released another Rapid Security Response for iOS, iPadOS, and macOS. This replaces the RSR released two days ago that was pulled. This is an update for an exploited vulnerability.
More info.
Juniper Monthly Patches are out with 17 bulletins, 2 rated Critical, 6 rated High, 8 rated Medium,
More info.
PHP software included with Junos OS J-Web has been updated to resolve multiple vulnerabilities. Highest CVSSv3 score of 9.8
More info.
Multiple vulnerabilities in third party software used in Juniper Networks Contrail Cloud have been resolved. Highest CVSSv3 score of 10
More info.
Multiple DoS vulnerabilities have been resolved in Juniper products. Highest CVSSv3 score of 7.5
More info. And here. And here. And here. And here.
Dell PowerProtect Cyber Recovery remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system. Dell rates this Critical.
More info.
SonicWall GMS and Analytics products are affected by critical, high, and medium severity vulnerabilities. Highest CVSSv3 score of 9.8
More info.
A relative path traversal vulnerability in Setelsa Security's ConacWin, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter. CVSSv3 score of 7.5
More info.
NMS300 contains multiple security vulnerabilities. Highest CVSSv3 score of 9.8
More info.
vm2 contains two RCE vulnerabilities. No patches are available yet. CVSSv3 score of 9.8
More info.
Two DoS vulnerabilities have been fixed in Wireshark.
More info.
Ubuntu has updated the kernel. More info.
Comments