Cisco patches Critical vulnerabilities in VPN and Router products
Cisco has patched Critical vulnerabilities in VPN Firewall and Router products, as well as High risk bugs in SD-WAN products.
Network Security
Juniper patches Junos OS, SRX, SRC Bouncy Castle and many other vulnerabilities
Juniper Networks has released 19 security advisories to fix many vulnerabilities on Junos OS and other products. The updates also address a Critical SRX “double free” flaw and multiple SRC Bouncy Castle vulnerabilities.
F5 patches Critical RCE vulnerability (CVE-2020-5902) in BIG-IP configuration utility
F5 has patched a Critical remote code execution (RCE) vulnerability (CVE-2020-5902) in the Configuration utility of BIG-IP. Researchers further discovered 8,000 devices were vulnerable on the internet and could result in full system compromise.
Cisco patches small business switch high risk vulnerability (CVE-2020-3297) and 7 other security issues
Cisco has patched a High severity Cisco small business switch vulnerability (CVE-2020-3297) and 7 other Medium rated issues that affect multiple Cisco products.
Palo Alto Networks patches Critical PAN-OS authentication bypass vulnerability (CVE-2020-2021)
Palo Alto Networks has issued a Critical security advisory for PAN-OS authentication bypass in SAML authentication vulnerability CVE-2020-2021.
Netgear fixes high risk vulnerability in multiple routers and network devices
Netgear has released firmware updates to fix a high severity remote code execution (RCE) vulnerability in multiple Netgear routers and other network devices. A remote attacker could exploit to take control of an affected device.
XORDDoS and Kaiji DDoS botnets target internet exposed Docker servers
Security experts warn malware variants of XORDDoS and Kaiji distributed denial-of-service (DDoS) botnets are targeting exposed Docker servers.
Cisco releases Critical Treck IP Stack advisory and 7 other High severity updates
Cisco has released a Critical security advisory for three Treck IP Stack vulnerabilities, as well as seven other High severity advisories that affect multiple products.
New PoC exploits SMBv3 vulnerability on unpatched systems
A security researcher has developed new proof-of-concept (PoC) code that can exploit an SMBv3 compression remote code execution (RCE) vulnerability CVE-2020-0796 on unpatched Windows systems.
Cisco patches Critical RCE vulnerability in Unified CCX software
Cisco patched a Critical RCE vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX). The company also addressed a DoS vulnerability in MDS 9000 Series Switches.