CVE Vulnerability Advisory Database

[Affected Scope] FortiOS versions 6.0 through 7.4.2 and FortiProxy versions 1.0 through 7.4.2 with SSL-VPN service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands on the target system via specially crafted HTTP requests

[Mitigation] Immediately upgrade to the patched firmware versions, or disable the SSL-VPN service as a temporary workaround

[Affected Scope] Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x), and Ivanti Neurons for ZTA

[Impact] Unauthenticated remote attackers can exploit the SAML component to bypass authentication and access restricted internal resources

[Mitigation] Immediately apply the official vendor security patches or import the temporary mitigation XML profile

[Affected Scope] D-Link DIR-859 router firmware version 1.06B01 and prior.

[Impact] Unauthenticated remote attackers can exploit this vulnerability to read sensitive system configuration files and potentially gain full administrative control over the device.

[Mitigation] This product is End-of-Life (EOL) and will not receive official security patches; immediate retirement and replacement of the device is strongly recommended.

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances running vulnerable firmware versions

[Impact] Unauthenticated remote attackers can trigger a Denial of Service (DoS) state or perform Out-Of-Bounds Memory Reads to access sensitive data

[Mitigation] Immediately upgrade to the latest patched firmware versions recommended by Citrix and restrict external access

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances with management interfaces (NSIP, CLIP, or SNIP) exposed and possessing authenticated (low-privileged) credentials

[Impact] Authenticated attackers can perform remote code execution (RCE) on the management interface, potentially leading to full system compromise

[Mitigation] Immediately apply the official security patches provided by Citrix and restrict access to management interfaces (NSIP, CLIP, SNIP)

[Affected Scope] Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) gateway appliances

[Impact] An authenticated administrator can send specially crafted HTTP requests to execute arbitrary OS commands with root privileges, leading to full appliance compromise

[Mitigation] Apply the official vendor security patches immediately, or import the temporary mitigation XML file provided by Ivanti to block vulnerable API endpoints

[Affected Scope] Ivanti Connect Secure (ICS) versions 9.x, 22.x and Ivanti Policy Secure gateways

[Impact] Unauthenticated remote attackers can bypass access control checks on the web component, gaining unauthorized access to restricted resources and sensitive configuration data

[Mitigation] Immediately apply the official vendor patches or import the temporary mitigation XML profile provided by Ivanti to block the exploitation path

[Affected Scope] Legacy QNAP VioStor NVR models running QVR Firmware 4.x

[Impact] Authenticated attackers can execute arbitrary OS commands via network requests, potentially leading to full system compromise

[Mitigation] Immediately upgrade QVR Firmware to version 5.0.0 or later, or restrict network access to the device

[Affected Scope] FXC AE1021PE firmware version 2.0.9 and earlier, and AE1021 firmware version 2.0.9 and earlier

[Impact] An authenticated attacker can execute arbitrary OS commands with root privileges, potentially leading to full device takeover and botnet recruitment

[Mitigation] Immediately apply the official firmware patch (v2.0.10 or later) and restrict access to the management interface

[Affected Scope] SonicWall SMA100 series (SMA 200, 210, 400, 410, 500v) running firmware versions 10.2.1.11-63sv and below.

[Impact] A remote authenticated attacker with administrative privileges can inject arbitrary OS commands via the management interface, executing them with 'nobody' user privileges.

[Mitigation] Immediately upgrade the SMA100 firmware to the patched version (10.2.1.12-65sv or higher) and restrict access to the management interface.

[Affected Scope] Unitronics Vision and Samba PLCs and HMIs configured using VisiLogic versions prior to 9.9.00

[Impact] Unauthenticated remote attackers with network access can exploit default administrative credentials to gain full control of the target system

[Mitigation] Upgrade VisiLogic to version 9.9.00 or later, change default passwords immediately, and restrict external network exposure

[Affected Scope] F5 BIG-IP Configuration Utility (accessible via management ports and/or self IP addresses)

[Impact] Authenticated attackers with network access can exploit SQL injection to manipulate the database and execute arbitrary system commands with root privileges

[Mitigation] Apply official F5 security patches immediately and restrict access to the Configuration Utility (TMUI) using firewalls and ACLs

[Affected Scope] F5 BIG-IP systems with network access to the Configuration Utility (TMUI) via the management port and/or Self IP addresses.

[Impact] Unauthenticated remote attackers can bypass authentication mechanisms and execute arbitrary system commands with root privileges on the target system.

[Mitigation] Immediately apply the official F5 security patches or restrict access to the TMUI (port 443) from untrusted networks as a temporary workaround.

[Affected Scope] Cisco IOS XE Software with the Web UI feature enabled on network devices

[Impact] An authenticated, remote attacker can exploit insufficient input validation to inject arbitrary commands into the underlying operating system with root privileges, leading to complete system compromise

[Mitigation] Immediately disable the Web UI feature or upgrade to the latest patched Cisco IOS XE software release

[Affected Scope] Cisco IOS XE Software with the Web UI feature enabled and exposed to the internet

[Impact] Unauthenticated remote attackers can bypass authentication to create a local user with Privilege 15 access, subsequently elevating to root to install a persistent malicious implant

[Mitigation] Immediately disable the Web UI (HTTP/HTTPS Server) feature or restrict access to trusted management networks, and upgrade to the recommended fixed software releases

[Affected Scope] On-premises deployments of Microsoft Skype for Business Server 2015 and 2019

[Impact] Unauthenticated remote attackers can send specially crafted HTTP requests to perform Server-Side Request Forgery (SSRF), accessing internal network resources and exposing sensitive information

[Mitigation] Immediately apply the official Microsoft Cumulative Update (CU) patches and restrict outbound traffic from the application servers

[Affected Scope] NetScaler ADC and NetScaler Gateway configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory buffer over-read to leak active session tokens, bypassing Multi-Factor Authentication (MFA) to hijack sessions

[Mitigation] Immediately apply the official vendor security patches and terminate all active user sessions to invalidate potentially compromised tokens

[Affected Scope] Cisco IOS and Cisco IOS XE Software with the Group Encrypted Transport VPN (GET VPN) feature enabled

[Impact] An authenticated, remote attacker with administrative control over a key server or group member can execute arbitrary code or cause a device reload (DoS)

[Mitigation] Apply the official Cisco software updates and restrict GDOI/G-IKEv2 protocol access to authorized infrastructure nodes only

[Affected Scope] Juniper Networks Junos OS on SRX Series devices with the J-Web interface enabled in specific vulnerable versions

[Impact] Unauthenticated network-based attackers can send crafted requests to webauth_operation.php to upload or download arbitrary files, compromising file system integrity and potentially chaining to remote code execution (RCE)

[Mitigation] Immediately upgrade Junos OS to the recommended patched release, or disable the J-Web interface / restrict access to trusted IP addresses

[Affected Scope] ASUS RT-AX55 devices running firmware version 3.0.0.4.386.51598 and prior.

[Impact] Authenticated attackers can execute arbitrary system commands with root privileges, leading to complete device compromise.

[Mitigation] Immediately upgrade to the latest official secure firmware version and disable remote WAN management.