Preface: To cope with Industrial automation and control system. The technology difference in between IT and OT are small. Perhaps they are close. For cyber security protection matters, seems they are no any difference. Product background: Formerly known as RSLinx® Enterprise, FactoryTalk® Linx is included with most FactoryTalk software and functions as the premier data…

Do you doubt whether you are a victim? A quick way to confirm the vulnerability of Fortinet SSL-VPN ( CVE-2018-13379). Preface: VPN client has design limitation causes information leakage not a news by today. However you should confirm your setup do not encounter this flaw. Background: An unknown person left the information online. The details…

Preface: Within this week, the impression of VMware products vulnerabilities draw attention with a lot of people. It is because the vulnerabilities was found are high risk rating. But VMware is one of the pillar of virtual machine machine world. Do not worry too much. A good product should have space for improvement. Product background:…

Preface: Use After Free scenario can occur when “the memory in question is allocated to another pointer validly at some point after it has been freed. Background: If there is a process named vmware-vmx[.]exe in the process list then there is a virtual machine that is currently powered on. The Virtual Machine Monitor (VMM) process…

Preface: There are two primary types of buffer overflow vulnerabilities: Stack overflow and Heap overflow. Product background: The administrative command–line client is a program that runs on a file server, workstation, or mainframe. It is installed as part of the Tivoli Storage Manager server installation process. The administrative client can be accessed remotely. From the…

Preface: Most SD-WAN suppliers have partnerships with leading cloud platforms, and they use a variety of methods to accelerate traffic coming to and from cloud platforms. But IT pros say, it should look for better security. Background: The Orchestrator provides you with a JSON-RPC API, which means you call it over HTTPS. It’s not a…

Preface: The interconnect component of the opensource application is the opensource software. Background: Salt (sometimes referred to as SaltStack) is Python-based, open-source software for event-driven IT automation, remote task execution, and configuration management. Vulnerability details: An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH…

NATS Srv wiki – Cloud native messaging system made for developers and operators who want to spend more time doing their work and lesstime worrying about how to do messaging. End user of this product: Mastercard, Baidu, Alibaba Group, VMware, GE, Pivotal, Telia Company, netlify, htc, GE, Zephyr Project, tinder and ERICSSON Vulnerability details: Some…