By michele654 on Thursday, 21 December 2023
Category: Vulnerabilities

New Vulnerabilities Thursday 21 December

New Alerts for Ivanti, Google Chrome (Exploit), Mitsubishi Electric, Dell, Asterisk, and Voltronic Power (0-Day).

Ivanti 

Avalanche has addressed several security vulnerabilities. Highest CVSSv3 score of 9.8
More info.

Google Exploit

Google has updated Chrome for Desktop with one security fix, rated High.
This has been exploited in the wild.
More info. And here.

Mitsubishi Electric 

Multiple vulnerabilities exist in Mitsubishi Electric FA products due to OpenSSL. An attacker could disclose information in the product or could cause DoS. Highest CVSSv3 score of 7.5
More info.

Dell 

PowerProtect DP Series Appliance (IDPA) Infrastructure remediation is available for multiple security vulnerabilities. Dell rates this Critical.
More info.

NetWorker remediation is available for multiple security vulnerabilities. Dell rates this High.
More info.

Asterisk 

Asterisk has published 4 new security advisories. Highest CVSSv3 score of 7.5
More info.

Voltronic Power 0-Day

Multiple vulnerabilities have been identified in ViewPower Pro, the worst of which will allow RCE by a remote attacker. Highest CVSSv3 score of 9.8
No response from vendor.
More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments