CVE Vulnerability Advisory Database

[Affected Scope] On-premises deployments of VeloCloud Orchestrator (VCO)

[Impact] Unauthenticated remote attackers can access privileged internal functionalities and execute arbitrary OS commands (CWE-78), leading to complete compromise of the orchestrator's confidentiality, integrity, and availability

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external network access to the orchestrator management interface

[Affected Scope] Check Point Security Management Servers and SmartConsole instances exposed to the internet without Trusted Clients restrictions configured

[Impact] Unauthenticated remote attackers can obtain a valid application login token, granting them full administrative privileges to modify security policies and configurations

[Mitigation] Apply the official vendor patches immediately, restrict internet access to the Management Server, and configure Trusted Clients IP restrictions

[Affected Scope] Sangoma Switchvox SMB Edition 8.3 (104997) and prior versions

[Impact] An unauthenticated remote attacker can execute arbitrary SQL statements against the backend PostgreSQL database, leading to full database compromise and remote code execution (RCE)

[Mitigation] Immediately upgrade to Switchvox version 8.4.0.2 or later, and restrict external access to the /pa endpoint

[Affected Scope] DD-WRT firmware versions before build 45724 with UPnP functionality enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code or cause a Denial of Service (DoS) by sending crafted SSDP M-SEARCH requests, with active exploitation by botnets (e.g., c0xmo) confirmed in the wild [1, 2, references]

[Mitigation] Immediately upgrade DD-WRT firmware to build 45724 or later, and disable UPnP services until the patch is applied [1, references]

[Affected Scope] SonicWall SMA1000 appliances utilizing the Appliance Management Console (AMC)

[Impact] An authenticated remote attacker with administrative privileges can execute arbitrary OS commands under specific conditions, potentially leading to full system compromise

[Mitigation] Immediately apply the latest firmware patches provided by SonicWall and restrict external access to the management console

[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface

[Impact] Remote unauthenticated attackers can force the appliance to make requests to unintended internal or external locations, potentially leading to internal network compromise or RCE

[Mitigation] Apply the official firmware updates immediately and restrict external access to the management interface

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory overflow, leading to unpredictable behavior, Denial of Service (DoS), or potential Remote Code Execution (RCE)

[Mitigation] Immediately apply the official security patches provided by Citrix and restrict external access to affected virtual servers

[Affected Scope] Zyxel GS1900-48HPv2 firmware versions up to 2.90(ABTQ.1)C0.

[Impact] Unauthenticated LAN-based attackers can execute arbitrary OS commands and gain full control of the device via crafted HTTP requests.

[Mitigation] Immediately update to the latest patched firmware and restrict access to the management interface using ACLs.

[Affected Scope] Web UI and API endpoints of Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage)

[Impact] An authenticated remote attacker can create or overwrite arbitrary files on the filesystem, potentially leading to root privilege escalation

[Mitigation] Immediately apply the official Cisco security patches and monitor unauthorized API requests and file upload activities

[Affected Scope] SimpleHelp versions 5.5.15 and prior, and 6.0 pre-release versions with OIDC authentication configured

[Impact] Unauthenticated remote attackers can forge identity tokens to bypass authentication, gain full technician sessions, and potentially bypass multi-factor authentication (MFA)

[Mitigation] Immediately upgrade SimpleHelp to the patched version or disable OIDC authentication until the patch is applied

[Affected Scope] Fortinet FortiSandbox (5.0.0 to 5.0.5, 4.4.0 to 4.4.8, 4.2 all versions), FortiSandbox Cloud and PaaS (5.0.4 to 5.0.5)

[Impact] An unauthenticated remote attacker can execute unauthorized OS commands with root privileges via specially crafted HTTP requests

[Mitigation] Immediately upgrade to the patched versions (5.0.6, 4.4.9 or higher) and restrict external access to the management interface

[Affected Scope] Ivanti Sentry versions prior to R10.5.2, R10.6.2, and R10.7.1

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges, leading to complete system compromise

[Mitigation] Immediately upgrade to the patched versions (R10.5.2, R10.6.2, R10.7.1, or higher)

[Affected Scope] Check Point Remote Access and Mobile Access VPN gateways utilizing the deprecated IKEv1 key exchange protocol

[Impact] Unauthenticated remote attackers can bypass user authentication and establish unauthorized VPN connections without valid user credentials

[Mitigation] Apply the official vendor hotfixes immediately, or disable the deprecated IKEv1 protocol and transition to IKEv2

[Affected Scope] Arista EOS-based switches configured with tunnel decapsulation such as VXLAN, decap-groups, or GRE tunnel interfaces

[Impact] Attackers can bypass security boundaries by sending unexpected tunneled packets, which the switch incorrectly decapsulates and forwards. This vulnerability is actively exploited in the wild

[Mitigation] Apply the latest EOS security patches from Arista or implement inbound Access Control Lists (ACLs) to restrict unauthorized tunnel traffic

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Manager (formerly vManage), and Validator (formerly vBond)

[Impact] An authenticated, local attacker with netadmin privileges can execute arbitrary commands as root and push unauthorized configuration changes to edge devices

[Mitigation] Immediately upgrade to the fixed software versions recommended by Cisco and verify the configuration integrity of all managed edge devices.

[Affected Scope] SolarWinds Serv-U file transfer server versions prior to 15.5.4 Hotfix 1

[Impact] Unauthenticated remote attackers can crash the Serv-U service instantly by sending specially crafted HTTP POST requests utilizing 'Content-Encoding: deflate'

[Mitigation] Immediately apply the official security patch (15.5.4 Hotfix 1 or later) or implement WAF rules to block specific compression headers

[Affected Scope] API management interfaces of Progress Kemp LoadMaster load balancer appliances

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted API requests, leading to full system compromise

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to the management API

[Affected Scope] Cisco Unified Communications Manager (Unified CM) and Session Management Edition (Unified CM SME) with WebDialer service enabled

[Impact] Unauthenticated remote attackers can perform SSRF, write arbitrary files to the underlying OS, and subsequently escalate privileges to root

[Mitigation] Apply official Cisco security patches immediately, or disable the WebDialer service as a temporary workaround

[Affected Scope] All network-accessible Ubiquiti UniFi OS devices

[Impact] Unauthenticated remote attackers can exploit an Improper Input Validation vulnerability (CWE-20) to execute arbitrary commands with root privileges, potentially recruiting devices into botnets (e.g., Mirai)

[Mitigation] Immediately apply the official vendor security patches and restrict external internet access to the UniFi OS management interface

[Affected Scope] All Ubiquiti UniFi OS devices accessible via the network.

[Impact] Unauthenticated attackers can exploit a Path Traversal (CWE-22) vulnerability to access and manipulate underlying system files, leading to complete takeover of system accounts.

[Mitigation] Immediately apply the official security patches provided by Ubiquiti and restrict external network access to the UniFi OS management interface.