Cyber security technical information

Category: Potential Risk of CVE

  • Cyber Security Focus SAP Security Patch Day-August 2021. About CVE-2021-33690 (August 10, 2021)

    Preface: Software Development Life Cycle is the application of standard business practices to building software applications. It’s typically divided into six to eight steps: Planning, Requirements, Design, Build, Document, Test, Deploy, Maintain. Background: The SAP NetWeaver development infrastructure combines the features and advantages of a local development environment (usually provided in a Java environment) and…

  • A vulnerability exists in Dream Security (Korea)’s PKI Security product. Remind us to pay attention to the baseline design. 9th Aug 2021

    Preface: Public key infrastructure (PKI) governs the issuance of digital certificates to protect sensitive data, provide unique digital identities for users, devices and applications and secure end-to-end communications. Technical background: From a technical point of view, application software is installed on the host and provides functions (listening to data on open ports or sending data to the…

  • CVE-2021-38203 – About btrfs design defect (9th Aug 2021)

    Preface: The following companies use Btrfs in production: Facebook (testing in production as of 2014/04, deployed on millions of servers as of 2018/10) Jolla (smartphone) Lavu (iPad) point of sale solution. Background: Btrfs is an advanced file system, jointly developed by an organization, and now specific Synology NAS models support this file system.Btrfs is now…

  • Security Focus – Host header tampering leading to server-side request on internal restricted service (5-8-2021)

    Preface: HTTP Host header attacks exploit vulnerable websites that handle the value of the Host header in an unsafe way. Background: After the initial configuration of Workspace ONE Access is complete, administrator can go to the Workspace ONE Access console pages to install certificates, manage passwords, and download log files. You can also update the…

  • CVE-2021-33403 – Lancer Token Ethereum ERC20 Token integer overflow (4-8-2021)

    Preface: As of 4th Aug, 2021. There are 8106 unique holders of Lancer Token now on total amount 151 377 339,14 LNC. Background: One of the most significant Ethereum tokens is known as ERC-20. ERC-20 tokens are issued on the Ethereum network. As of October 2019, more than 200,000 ERC-20-compatible tokens exist on Ethereum’s main…

  • It is reminded by the vulnerability note VU#405600 – 2nd Aug 2021

    Preface: Alert by CISA. Microsoft Windows Active Directory Certificate Services can allow for AD compromise via PetitPotam NTLM relay attacks. Background: Because NTLM has basic design weaknesses. If cyber criminals take advantage of NTLM’s design weaknesses. The design weaknesses of converting NTLM coexist with the EfsRpcOpenFileRaw method. It such made a powerful tool to corrupt…

  • CVE-2021-23417: DevOps Should be vigilant! (2nd Aug, 2021)

    Preface: JSON is a text-based data format following JavaScript object syntax. Even though it closely resembles JavaScript object literal syntax,it can be used independently from JavaScript, and many programming environments feature the ability to read (parse) and generate JSON. Background: Java application developer oftentimes need to combine objects into a single one which contains all…

  • Stay alert to Trend Micro products – 30th Jul 2021

    Preface: In order to expand business development, software products sometimes use similar engineering designs. When vulnerabilities occur, their effects seem to be interrelated. Privilege Escalation Attack Techniques: A low-privileged process from being escalated via a token stolen from a process with greater privileges. This technique is often used in tandem with another vulnerability to successfully…

  • CISA security advisory: KUKA KR C4 Controller (27th Jul 2021)

    Preface: The computer behind the robots performance is the Programmable Logic Controllers (PLCs). PLCS are able to control the robots and help them do their job at very specific times and points in the production process. Product background: The KR C4 software architeture integrates Robot Control, PLC Control, Motion Control (e.g. KUKA.CNC) and Safety Control.…

  • CVE-2021-34432 Do not kill mosquitto (27th July, 2021)

    Preface: Internet of Things (IoT) and machine-to-machine (M2M) technologies need to use a messaging and connectivity protocol in order to exchange information from a remote location. Background: MQTT is a binary-based protocol and has command and command acknowledgement format. So every time a client sends a command to the broker, the broker sends an acknowledgement.…