By michele654 on Tuesday, 19 November 2024
Category: Vulnerabilities

New Vulnerabilities Tuesday 19 November


New Alerts for Palo Alto Networks (fix for Exploit), Oracle, Mitsubishi Electric, Synology, Westermo, and Linux.

Palo Alto Networks 

Palo Alto Networks has patched a previously reported and exploited unauthenticated RCE vulnerability. CVSSv4 score of 9.3
More info.

Oracle 

Agile Product Lifecycle Management contains a vulnerability that allows a remote attacker to achieve file disclosure. CVSSv3 score of 7.5
More info.

Mitsubishi Electric 

A DoS vulnerability exists in MELSEC iQ-F Ethernet Module and EtherNet/IP Module that allows a remote attacker to cause a DoS by sending specially crafted SLMP packets. CVSSv3 score of 7.5
More info.

Synology 

Multipe vulnerabilities allow remote attackers to execute arbitrary code or execute arbitrary commands on a susceptible version of Synology Camera BC500 Firmware, Synology Camera CC400W Firmware and Synology Camera TC500 Firmware. Synology rates this Critical.
More info.

Westermo 

WeOS is vulnerable due to an issue in the software component zlib. CVSSv3 score of 7.5
The vulnerability is from 2018.
More info.

Linux 

SUSE has updated the kernel. More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details