Remove 2021 Remove Authentication Remove Firewall Remove Software Review
article thumbnail

CVE-2021-1609: Critical Remote Code Execution Vulnerability in Cisco Small Business VPN Routers

Tenable

CVE Description CVSSv3 CVE-2021-1609 Web Management Remote Code Execution and Denial of Service Vulnerability 9.8 CVE-2021-1610 Web Management Command Injection Vulnerability 7.2 CVE Description CVSSv3 CVE-2021-1609 Web Management Remote Code Execution and Denial of Service Vulnerability 9.8

article thumbnail

CVE-2024-3400: Zero-Day Vulnerability in Palo Alto Networks PAN-OS GlobalProtect Gateway Exploited in the Wild

Tenable

Background On April 12, Palo Alto Networks released a security advisory for a critical command injection vulnerability affecting PAN-OS, the custom operating system (OS) Palo Alto Networks (PAN) uses in their next-generation firewalls. According to the advisory, this vulnerability impacts PAN-OS versions 10.2, prior to 10.2.9-h1

Network 118
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

CVE-2021-22986: F5 Patches Several Critical Vulnerabilities in BIG-IP, BIG-IQ

Tenable

F5 releases patches for multiple vulnerabilities in BIG-IP and BIG-IQ, including a critical remote command execution flaw that does not require authentication and is likely to attract exploits in the near future. CVE-2021-22986. CVE-2021-22986. CVE-2021-22987. CVE-2021-22988. CVE-2021-22989. CVE-2021-22990.

article thumbnail

What Is cloud security?

Lacework

Cloud computing describes the practice of accessing software, databases, and resources via the Internet instead of on local (also known as ‘on-premises’) hardware. The 1990s also saw the rise of firewalls and antivirus programs, as organizations (and individuals) began storing and sharing more personal information online.

Cloud 98
article thumbnail

CVE-2021-20016: Zero-Day Vulnerability in SonicWall Secure Mobile Access (SMA) Exploited in the Wild

Tenable

NCC Group Research & Technology (@NCCGroupInfosec) January 31, 2021. SonicWall in response confirmed the findings from NCC Group regarding the presence of a zero-day in its products and tracked this under the security advisory SNWLID-2021-0001. SonicWall (@SonicWall) February 2, 2021. We expect to have a patch out on Feb.

Mobile 53
article thumbnail

March Patch Tuesday 2022

Ivanti

For example, the Windows OS update has a pair of publicly disclosed vulnerabilities including an RDP Remote Code Execution vulnerability ( CVE-2022-21990 ) and a Windows Fax and Scan Service Elevation of Privilege vulnerability ( CVE-2022-24459 ) which have reached proof-of-concept exploit code maturity.

article thumbnail

CVE-2020-2040: Critical Buffer Overflow Vulnerability in PAN-OS Devices Disclosed

Tenable

PAN-OS devices that have enabled the captive portal or multi-factor authentication features are vulnerable to a critical buffer overflow flaw. On September 9, Palo Alto Networks (PAN) published nine security advisories for a series of vulnerabilities affecting PAN-OS , a custom operating system (OS) found in PAN’s next-generation firewalls.