CVE Vulnerability Advisory Database

[Affected Scope] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)

[Impact] An attacker with administrative privileges can inject arbitrary OS commands and execute them with site user privileges

[Mitigation] Immediately apply the official security patches provided by BeyondTrust (Advisory BT24-11)

[Affected Scope] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) affected versions

[Impact] Unauthenticated remote attackers can inject and execute arbitrary system commands with the privileges of the 'site user'.

[Mitigation] Immediately apply the official security patches provided by BeyondTrust (BT24-10) and restrict access to management interfaces.

[Affected Scope] Mitel MiCollab through 9.8 SP2

[Impact] An authenticated attacker with administrative privileges can exploit insufficient input sanitization to read arbitrary non-sensitive local system files

[Mitigation] Apply the official security patches or upgrade to the latest supported version immediately

[Affected Scope] Zyxel ATP, USG FLEX, USG FLEX 50(W), and USG20(W)-VPN series running firmware versions V5.00 through V5.38

[Impact] Unauthenticated remote attackers can download or upload arbitrary files via crafted URLs, potentially leading to full system compromise and remote code execution

[Mitigation] Immediately upgrade to firmware version V5.39 or later, and restrict external access to the web management interface

[Affected Scope] Authenticated administrators with access to the PAN-OS management web interface

[Impact] Complete system compromise via arbitrary OS command execution with root privileges on the firewall

[Mitigation] Apply official security patches immediately and restrict access to the management interface from the public internet

[Affected Scope] Palo Alto Networks firewall appliances running PAN-OS 10.2, 11.0, 11.1, and 11.2 with the management web interface exposed to the network.

[Impact] Unauthenticated remote attackers can bypass authentication to gain administrative privileges, modify configurations, or chain with other privilege escalation flaws like CVE-2024-9474 to compromise the system.

[Mitigation] Immediately upgrade to the patched PAN-OS versions and restrict management interface access to trusted internal IP addresses only.

[Affected Scope] Certain End-of-Life (EOL) GeoVision IP cameras, video servers, and LPR systems

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges, leading to complete device takeover and botnet recruitment

[Mitigation] Since these devices are EOL and no patches will be released, immediately isolate the affected devices from the internet or replace them with supported models

[Affected Scope] Citrix Session Recording servers accessible to authenticated users on the same intranet

[Impact] Limited remote code execution (RCE) under the context of the NetworkService account, potentially leading to lateral movement

[Mitigation] Apply official Citrix security patches immediately and restrict network access to the Session Recording infrastructure

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software with Remote Access VPN (RAVPN) service enabled

[Impact] Unauthenticated, remote attackers can exhaust system resources by flooding VPN authentication requests, leading to a Denial of Service (DoS) of the RAVPN service and potentially requiring a device reload

[Mitigation] Apply official Cisco security patches immediately, configure connection rate limiting, and block malicious brute-force IP addresses

[Affected Scope] Multiple versions of FortiManager and FortiManager Cloud (7.6.0, 7.4.0-7.4.4, 7.2.0-7.2.7, 7.0.0-7.0.12, 6.4.0-6.4.14, 6.2.0-6.2.12, etc.)

[Impact] An unauthenticated remote attacker can execute arbitrary code or system commands via specially crafted requests, potentially leading to full system compromise

[Mitigation] Immediately upgrade to the official patched versions or apply workarounds to restrict unauthorized FGFM connections

[Affected Scope] NuPoint Unified Messaging (NPM) component within Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201)

[Impact] Unauthenticated remote attackers can exploit insufficient input validation to perform path traversal, allowing unauthorized access to view, corrupt, or delete user data and system configurations

[Mitigation] Immediately upgrade to the latest patched version provided by the vendor, and restrict external access to management interfaces

[Affected Scope] ScienceLogic SL1 (formerly EM7) versions prior to 12.1.3, 12.2.3, and 12.3, including older lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x

[Impact] Unauthenticated remote attackers can exploit an unspecified third-party component packaged with SL1 to execute arbitrary commands and gain full system control

[Mitigation] Immediately upgrade to patched SL1 versions (12.1.3+, 12.2.3+, 12.3+) or apply the corresponding hotfixes for your specific version line

[Affected Scope] All vulnerable versions of Palo Alto Networks Expedition migration tool

[Impact] Unauthenticated remote attackers can extract database contents (password hashes, API keys) and read/write arbitrary files, leading to full system compromise

[Mitigation] Immediately upgrade Expedition to the latest patched version and restrict network access to trusted administrative hosts

[Affected Scope] Palo Alto Networks Expedition migration tool versions prior to 1.2.96

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands as root, leading to the exposure of PAN-OS firewall usernames, cleartext passwords, device configurations, and API keys

[Mitigation] Immediately upgrade Expedition to version 1.2.96 or later, and rotate all potentially exposed firewall credentials and API keys

[Affected Scope] Ivanti CSA (Cloud Services Appliance) versions prior to 5.0.2

[Impact] A remote authenticated attacker with administrative privileges can execute arbitrary SQL statements, potentially leading to sensitive data exposure and further system compromise.

[Mitigation] Immediately upgrade Ivanti CSA to version 5.0.2 or higher, and restrict external access to the admin console.

[Affected Scope] Ivanti Cloud Services Appliance (CSA) versions prior to 4.6 Patch 519

[Impact] Unauthenticated remote attackers can bypass authentication via path traversal to access restricted administrative endpoints, potentially leading to Remote Code Execution (RCE) when chained with other vulnerabilities

[Mitigation] Organizations utilizing Ivanti CSA 4.6 must immediately apply Patch 519 or migrate to the actively supported CSA 5.0, as the 4.6 branch has reached End-of-Life (EOL)

[Affected Scope] PTZOptics PT30X-SDI/NDI-xx camera devices running firmware versions prior to 6.3.40

[Impact] Attackers can manipulate the 'ntp_addr' configuration to execute arbitrary OS commands with system privileges when 'ntp_client' starts, which can lead to unauthenticated remote code execution when chained with CVE-2024-8956

[Mitigation] Immediately upgrade the camera firmware to version 6.3.40 or later via the official PTZOptics portal and restrict network access

[Affected Scope] PTZOptics PT30X-SDI and PT30X-NDI camera devices running firmware versions prior to 6.3.40.

[Impact] Remote, unauthenticated attackers can bypass authentication by omitting the HTTP Authorization header, leading to the exposure of sensitive configuration data, password hashes, and unauthorized configuration modifications.

[Mitigation] Immediately upgrade the camera firmware to version 6.3.40 or higher and restrict external internet access to the device.

[Affected Scope] VMware vCenter Server 7.0 and 8.0 families, VMware Cloud Foundation 4.x and 5.x families

[Impact] An unauthenticated attacker with network access can escalate privileges to root by sending a specially crafted network packet

[Mitigation] Immediately upgrade to the patched versions (vCenter 8.0 U3b or later, 7.0 U3t or later) as recommended by Broadcom

[Affected Scope] VMware vCenter Server versions 7.0 and 8.0, VMware Cloud Foundation versions 4.x and 5.x

[Impact] An unauthenticated remote attacker can trigger a heap overflow via specially crafted DCERPC packets, potentially executing arbitrary code with root privileges

[Mitigation] Immediately apply the official Broadcom security patches (vCenter 8.0 U3b / 7.0 U3s or later) and restrict network access to vCenter management ports