Skip to main content

CND News and Blog

New Vulnerabilities Wednesday 05 February


Monthly Patches for Google Pixel are out. New Alerts for Google Chrome, F5, AutomationDirect, Elber, Veeam, Mozilla, and Linux.

Google 

Monthly Patches for Pixel includes 1 vulnerability rated High, as well as Android patches.
More info.

Chrome for Desktop has been updated to fix 12 security vulnerabilities. More info.

Microsoft is aware of the chromium vulnerabilities. More info.

F5 

F5 has published several bulletins for BIG-IP. Highest CVSSv4 score of 8.7
More info.

AutomationDirect 

C-more EA9 HMI contains a function that can be skipped, which could result in a remote attacker causing a DoS or achieving RCE. CVSSv4 score of 9.3
More info.

Elber 

Communications Equipment contains vulnerabilities that could allow a remote attacker unauthorized administrative access to the affected device. CVSSv4 score of 9.3
Equipment is near EoL, and will not be updated.
More info.

Veeam 

A vulnerability within the Veeam Updater component allows a remote attacker to utilize MitM to execute arbitrary code on the affected appliance server with root-level permissions. CVSSv3 score of 9.0
More info.

Mozilla 

Mozilla has published security updates rated High for Thunderbird, Thunderbird ESR, Firefox, and Firefox ESR.
More info.

Linux 

Red Hat has updated the kernel. More info.



Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

A mobile version of our Security Wizardry Radar Page, providing vulnerability details and visibility for a variety of software and industries.

SecurityWizardry.com - Vulnerability Details

Security Wizardry Radar Page provides vulnerability details and visibility for a variety of software and industries.

Report Print
×
Stay Informed

When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them.

By accepting you will be accessing a service provided by a third-party external to https://www.cndltd.com/