New Alerts for Crestron, Lexmark, Apple (Exploit), GE (Exploit), HCL Software, and Linux.
Crestron
Crestron has patched the UC-engine product line for OpenSSL vulnerabilities. CVSSv3 score of 5.3
More info.
Lexmark has patched their printers to fix a vulnerability that allows an attacker to bypass protections on the device that protect local accounts against brute-force guessing attacks.. CVSSv3 score of 5.3
More info.
A Server-Side Request Forgery vulnerability has been identified in the Web Services feature of newer Lexmark devices. This vulnerability can be leveraged by an attacker to gain arbitrary code execution on the device. CVSSv3 score of 9.0
More info.
Apple has published updates for Safari, iOS, macOS, and watchOS. iOS includes fixes for older versions for actively exploited vulnerabilities. Highest CVSSv3 score of 9.8.
More info.
DS Agile SMT is built on the Windows-10 operating system and is using an older version of Log4j, allowing a remote attacker to perform RCE. CVSSv3 score of 10.
More info.
HCL BigFix WebUI is affected by security vulnerabilities in source code and open source components. Highest CVSSv3 score of 9.8
More info.
Red Hat has updated the kernel. More info.
Debian has updated the kernel. More info.
Security Wizardry Cyber Threat Intelligence - The Radar Page
Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page