Remove 2019 Remove Firewall Remove Operating System
article thumbnail

CVE-2024-3400: Zero-Day Vulnerability in Palo Alto Networks PAN-OS GlobalProtect Gateway Exploited in the Wild

Tenable

Background On April 12, Palo Alto Networks released a security advisory for a critical command injection vulnerability affecting PAN-OS, the custom operating system (OS) Palo Alto Networks (PAN) uses in their next-generation firewalls. According to the advisory, this vulnerability impacts PAN-OS versions 10.2,

Network 123
article thumbnail

Tenable Roundup for Microsoft’s August 2019 Patch Tuesday: DejaBlue

Tenable

Microsoft’s August 2019 Security Updates, released on August 13, address over 90 vulnerabilities, 29 of which are critical. Microsoft’s August 2019 Patch Tuesday release contains updates for 93 CVEs, 29 of which are rated Critical. CVE-2019-0736 | Windows DHCP Client Remote Code Execution Vulnerability.

Windows 15
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CVE-2020-2021: Palo Alto Networks PAN-OS Vulnerable to Critical Authentication Bypass Vulnerability

Tenable

PAN-OS is the custom operating system (OS) that Palo Alto Networks (PAN) uses in their next-generation firewalls. If you use Palo-Alto firewalls with SAML -- particularly with GlobalProtect VPN -- you probably want to urgently patch this. PAN-OS next-gen firewalls including: PA-Series. CVE-2019-1579.

article thumbnail

CVE-2019-0708: BlueKeep Exploited in the Wild to Deliver Cryptocurrency Miner

Tenable

On November 2, security researchers Kevin Beaumont ( @GossiTheDog ) and Marcus Hutchins ( @MalwareTechBlog ) confirmed the first in-the-wild exploitation of CVE-2019-0708 , also known as BlueKeep. CVE-2019-0708 , a critical remote code execution vulnerability in Microsoft’s Remote Desktop Services, was patched back in May 2019.

Windows 14
article thumbnail

CVE-2021-1609: Critical Remote Code Execution Vulnerability in Cisco Small Business VPN Routers

Tenable

Successful exploitation would grant an attacker the ability to gain arbitrary command execution on the vulnerable device’s operating system. In January 2019, Cisco published advisories for two different vulnerabilities in its RV320 and RV325 WAN VPN routers. The table below lists the publicly accessible devices.

article thumbnail

CVE-2024-21762: Critical Fortinet FortiOS Out-of-Bound Write SSL VPN Vulnerability

Tenable

critical infrastructure through exploitation of known vulnerabilities Background On February 8, Fortinet published an advisory (FG-IR-24-015) to address a critical flaw in FortiOS, its network operating system. CVE Description CVSSv3 Severity CVE-2024-21762 Fortinet FortiOS Out-of-bound Write Vulnerability in sslvpnd 9.6

Malware 126
article thumbnail

Critical Vulnerabilities Dubbed URGENT/11 Place Devices Running VxWorks at Risk of RCE Attacks

Tenable

The Armis Research Team has released an advisory for URGENT/11 , which contains six critical RCE and five additional vulnerabilities in VxWorks , a Real-Time Operating System (RTOS) found in over 2 billion devices, including critical industrial, medical and enterprise hardware. CVE-2019-12256. CVE-2019-12257.