Cisco’s SD-WAN management software has been letting some attackers walk through an authentication check without having to prove who they are. The company says it has now fixed the flaw that was allowing it. The affected platform, Cisco Catalyst SD-WAN Manager, is used to configure and operate software-defined network deployments. Cisco said in an... Weiterlesen: Cisco SD-WAN Manager hit by zero-day admin access attack
Intelligence View
⚡ tsecurity.de Intelligence
Cisco SD-WAN Manager hit by zero-day admin access attack
Cisco’s SD-WAN management software has been letting some attackers walk through an authentication check without having to prove who they are. The company says i…
Social Reaktionen1 Klick Feedback
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
6 sources
CVE-2020-6153 | AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 SOAP FavoritesService.asmx HTTP Request sql injection
5 more sources
VVulDB Updates1 hour agoCVE-2020-13521 | AVEVA eDNA Enterprise Data Historian SOAP ednareporting.asmx psAttribute sql injection VVulDB Updates1 hour agoCVE-2020-13508 | AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 Web Service Alias.asmx AliasName sql injection VVulDB Updates1 hour agoCVE-2020-13503 | AVEVA eDNA Enterprise Data Historian SOAP ednareporting.asmx AttFilterName sql injection VVulDB Updates1 hour agoCVE-2020-13507 | AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 Web Service Alias.asmx HTTP Requests sql injection VVulDB Updates1 hour agoCVE-2020-13502 | AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 Web Service DNAPoints.asmx HTTP Request sql injection
5 sources
CVE-2024-26770 | Linux Kernel up to 6.6.18/6.7.6 nvidia-shield devm_kasprintf null pointer dereference (83527a13740f/e71cc4a1e584/b6eda11c44dc / WID-SEC-2024-0773)
4 more sources
VVulDB Updates1 hour agoCVE-2024-26771 | Linux Kernel up to 6.7.6 dmaengine devm_kasprintf null pointer dereference (WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26774 | Linux Kernel up to 5.15.149/6.1.79/6.6.18/6.7.6 ext4 mb_update_avg_fragment_size divide by zero (Nessus ID 210815 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26775 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 aoe set_capacity deadlock (Nessus ID 227916 / WID-SEC-2024-0773) VVulDB Updates1 hour agoCVE-2024-26776 | Linux Kernel up to 6.7.6 hisi-sfc-v3xx null pointer dereference (WID-SEC-2024-0773)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4222401/vulnerabilities-cve/cisco-sd-wan-manager-hit-by-zero-day-admin-access-attack/