By michele654 on Tuesday, 21 November 2023
Category: Vulnerabilities

New Vulnerabilities Tuesday 21 November


New Alerts for Sophos (Exploit), Synology, Phoenix Contact, Mozilla, WithSecure, and Linux.

Sophos Exploit

Sophos Web Appliance has been updated to fix several vulnerabilities that could allow a remote attacker to execute arbitrary code. Highest CVSSv3 score of 9.8
Exploits have been seen in the wild.
More info.

Synology 

Synology Router Manager contains vulnerabilities that allow a MitM attacker to execute arbitrary code and access intranet resources.
More info.

Phoenix Contact 

Phoenix Contact products use WIBU CodeMeter Runtime which has several vulnerabilities. Manual update of the CodeMeter software is required. CVSSv3 score of 9.8
More info. And here.

Mozilla 

Mozilla has published bulletins rated High for Firefox, Firefox ESR, Firefox for iOS, and Thunderbird.
More info.

WithSecure 

A DoS vulnerability was discovered in WithSecure products that allows a remote attacker to trigger an issue where fuzzed file takes longer to scan, which eventually may cause the scanner to hang.
More info.

Linux 

SUSE has updated the microcode. More info.
Red Hat has updated the kernel. More info.
Ubuntu has updated the kernel. More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments