Cyber security technical information

Author: admin

  • Siemens – Security Advisory by Siemens ProductCERT SSA-250618: Denial-of-Service Vulnerability in SIMATIC TDC CP51M1

    Preface: a motion control system includes at least three basic components — a motor, a drive, and a controller. Second, motion control systems are primarily used in discrete industries such as packaging and semiconductor manufacturing, as opposed to process industries such as chemical manufacturing and power generation. Product background: Siemens SIMATIC TDC provides the highest…

  • 23rd Sep 2019 – Microsoft Releases Out-of-Band Security Updates

    Security focus – CVE-2019-1367: Microsoft conducted remedy for CVE-2018-8653, but a item not being fixed. Suspected that this is one of the reason let Microsoft Releases Out-of-Band Security Updates on 23th Sep 2019. Should you have interested of this matter, please refer to attached diagram. The official announcement can be found at: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1367 Apart from…

  • Sep 2019 Security advisory by Siemens productcert

    Preface: Do you think that VPN solutions will reduce the level of network security risks? Background: On 10th Sep, 2019, Siemens announce that a multiple vulnerabilities in SINEMA connect server. Our attention this time will be focused CVE-2019-13920 and CVE-2019-13922. Refer to attached diagram, the fundamental design of SINEMA and network switch can form VPN…

  • Deploying cutting-edge technology, it is difficult to avoid vulnerability – cve-2019-16103

    Preface: The SD-WAN is a specific application of software-defined networking (SDN) technology applied to WAN connections such as broadband internet, 4G, LTE, or MPLS.The technology deployment consists of QoS and network resiliance. Product background: EdgeConnect has following features: Extend the micro-segmentation of specific application traffic from the data center to the entire WAN to help…

  • Vmware – Storm in teacup (Sep 2019)

    Preface: In 1894 Damoizeau developed a panoramic stereoscopic camera with twin-lenses, twin-spools and twin -slits. Background information: With 3D graphics configured for RDS hosts, both applications in application pools and applications running on RDS desktops can display 3D graphics. Vulnerability details: This vulnerability can be triggered by providing a tamper-evident pixel shader to the AMD…

  • vmware Security Focus CVE-2019-5532 and CVE-2019-5534

    Introduction: Open Virtualization Format. Open Virtualization Format (OVF) is an open standard for packaging and distributing virtual appliances or, more generally, software to be run in virtual machine. Synopsis: Open Virtualization Format provides the ability to let a virtual appliance and run it on different vendors of virtual machine. For example: Vmware.Two of the vulnerabilities,…

  • Staying alert of your hhvm (cve-2019-11925 & cve-2019-11926)

    What is HHVM? HHVM is an open-source virtual machine designed for executing programs written in Hack and PHP. The mechanism is convert PHP to bytecode. Then, bytecode translated to machine code at runtime by JIT (just-in-time) compiler. Vulnerability details: CVE-2019-11925 and CVE2019-11926 found design weakness of the boundary check when processing JPEG APP12 block marker…

  • New generation of weapon iot+lora+Drone (2019)

    Preface: Traditionally, only big country can have military weapon. Computer technology especially IoT devices not only replace human power. As we seen, IoT 4.0 is going to replace routine man power resources. Perhaps IoT technology also infiltrate in military arsenal . Details: On Sep, 2019. Drone attacks have set alight two major oil facilities run…

  • cve-2019-11660 Data protector privilege escalation via omniresolve (Sep 2019)

    Prefect: People prefer Veeam because the interface is easier, and Data Protector is difficult in comparison. Product details: Data protector is a backup and disaster recovery solution for large, complex, and heterogeneous IT environments. Vulnerability details: A potential vulnerability has been identified in Micro Focus Data Protector. The vulnerability could be exploited by a low-privileged…

  • Who lives on the moon?

    A myth from ancient China. The story tells a woman who lives on the moon. But the astronauts have never seen her. Because she lives in the interior of the moon. The density of lunar rocks brought back by Apollo’s lunar landing plan is much larger than that of the Earth’s rocks. It can be…