By michele654 on Thursday, 19 January 2023
Category: Vulnerabilities

New Vulnerabilities Thursday 19 January


New Alerts for Cisco, WithSecure, Mitel, and Wireshark.

Cisco 

A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. CVSSv3 score of 4.7
More info.

WithSecure 

A DoS vulnerability was discovered in WithSecure products whereby the aerdl.dll unpacker handler crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker.
More info.

Mitel 

A vulnerability in the ccmweb component of MiContact Center Business server could allow an unauthenticated attacker to download arbitrary files due to insufficient restriction of URL parameters. A successful exploit could allow access to sensitive information.
More info.

Wireshark 

Wireshark has published 7 new bulletins identifying memory leaks and software crash vulnerabilities. Highest CVSSv3 score of 4.3
More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments