-
CVE-2019-10141 Red Hat OpenStack openstack-ironic-inspector Introspection SQL Injection Vulnerability – JUl 2019
Preface:The cloud can be managed with a web-based dashboard or command-line clients, which allow administrators to control.At the same time it lures the arrival of cyber attackers. Product background: Red Hat OpenStack Platform provides the foundation to build a private or public Infrastructure-as-a-Service (IaaS) cloud on top of Red Hat Enterprise Linux. Vulnerability details: A…
-
802.1AB is the burden of Cisco Nexus 9000 series Fabric switches. it let cisco increase one more vulnerability (CVE-2019-1890) – 3rd Jul 2019
Preface: Switched Fabric or switching fabric is a network topology in which network nodes interconnect via one or more network switches. What is Cisco ACI? – Cisco ACI is a tightly coupled policy-driven solution that integrates software and hardware. The hardware for Cisco ACI is based on the Cisco Nexus 9000 family of switches. The…
-
2nd Jul 2019 – VMware product updates address Linux kernel vulnerabilities in TCP Selective Acknowledgement (SACK) (CVE-2019-11477, CVE-2019-11478)
Preface: ESXi is not built upon the Linux kernel, but uses an own VMware proprietary kernel (the VMkernel) and software, and it misses most of the applications and components that are commonly found in all Linux distributions. In common Linux circumstances to avoid SACK vulnerabilities. The workaround are: CVE-2019-11477 Workground – Disable sack: sudo sysctl…
-
cve-2019-7225 hmi hardcoded credentials vulnerability (jul 2019)
Preface: As time goes by, As time goes by, the common software design mistake found on business computer world now extend to industrial area. The impact includes SCADA , PLC and graphical user interfaces software. Design defect: On systems, a default administration account exists which is set to a simple default password which is hard-coded…
-
IoT world hiccups – CVE-2019-12951 Mongoose parse mqtt() Function Heap-Based Buffer Overflow Vulnerability – Now fixed – Jun 2019
Preface: Smart City look like a housekeeper. The sensor is his eye.But do you have question? He is a man or she is a woman. Background: Mongoose is a cross-platform embedded web server and networking library with functions including different protocol (TCP, HTTP, WebSocket, Server MQTT client and broker). What is MQTT? MQTT is a…
-
Cisco security advisory – DCNM – Jul 2019
Preface: The vendor announce that they found vulnerability on their product means they are responsible. Even though it is not a good news. But believe that it is under control. Product background: Data Center Network Manager (DCNM) is the network management platform for all NX-OS-enabled deployments . Vulnerability details: Authentication Bypass Vulnerability occurs due to…
-
A design flaw – The CVE dictionary entry submitted on 2018 (cve-2018-10239), vendor official announcement of the first publication on May 13, 2019.
Preface: You can still find the default username and password on your computer today! Coincidentally, they share common characteristics. They have super user capabilities. Synopsis: Infoblox delivers essential technology to enable customers to manage, control and optimize DNS, DHCP, IPAM . Vulnerability Details: A privilege escalation vulnerability in the “support access” feature on Infoblox NIOS…
-
Country to country APT attack mechanism not complex, believe that it exploit design flaw instead of backdoor – Jun 2019
Preface: It was the best of times, it was the worst of times, it was the age of wisdom, it was the age of foolishness, … Synopsis: Mongoose is a cross-platform embedded web server and networking library with functions including different protocol (TCP, HTTP, WebSocket, Server MQTT client and broker). Since the footprint is small…
-
Linux world worries! CVE-2019-11477 TCP SACK PANIC – Kernel vulnerability (Jun 2019)
Preface: Router, SD-WAN,Load-balancer, Firewall and IDS and virtual machine. Their operations are based on Linux operation system. Background: A Selective Acknowledgment (SACK) mechanism, combined with a selective repeat retransmission policy, can help to overcome these limitations. The receiving TCP sends back SACK packets to the sender informing the sender of data that has been received.…
-
CVE-2019-1625 Cisco SD-WAN Solution Privilege Escalation Vulnerability – Jun 2019
Preface: Add the Viptela SD-WAN technology to the IOS XE software running the ISR/ASR routers. Both Cisco ASR and ISR routers offer secure WAN connectivity. Vulnerability details: A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. Root…