CVE Vulnerability Advisory Database

[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.9.03015

[Impact] An authenticated local attacker can exploit the IPC channel to load a malicious DLL, leading to arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

[Mitigation] Immediately upgrade all affected Windows endpoints to Cisco AnyConnect Secure Mobility Client version 4.9.03015 or later.

[Affected Scope] FortiOS versions 6.2.0 and below, and 6.0.x branch prior to patched releases

[Impact] An unauthenticated attacker on the same subnet can intercept sensitive credentials by impersonating the legitimate LDAP server

[Mitigation] Upgrade FortiOS to the latest patched release or enforce LDAPS with strict certificate validation

[Affected Scope] Pulse Connect Secure versions prior to 9.1R8 admin web interface

[Impact] An authenticated attacker with administrator privileges can execute arbitrary code on the appliance by sending a specially crafted URI, leading to complete system compromise

[Mitigation] Immediately upgrade Pulse Connect Secure to version 9.1R8 or higher, and restrict external access to the admin interface

[Affected Scope] MobileIron Core & Connector versions 10.6.0.0 and earlier, Sentry versions 9.8.0 and earlier, Monitor & RDB versions 2.0.0.1 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code with system administrator privileges by sending specially crafted Hessian serialized data

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to sensitive service endpoints

[Affected Scope] 64-bit Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the splwow64.exe process

[Impact] Local attackers can exploit memory corruption (CWE-787) to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Apply the official Microsoft security updates immediately, or restrict local execution privileges and disable the Print Spooler service as a temporary workaround

[Affected Scope] Apple Mail client running on iOS versions prior to 13.5, iOS prior to 12.4.7, and watchOS versions prior to 6.2.5 and 5.3.7

[Impact] Processing a maliciously crafted email message can trigger heap corruption and excessive memory consumption, leading to mail application crashes or Denial of Service (DoS)

[Mitigation] Immediately apply official Apple software updates to upgrade to iOS/iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7, or later

[Affected Scope] IBM Data Risk Manager versions 2.0.1, 2.0.2, 2.0.3, and 2.0.4.

[Impact] A remote authenticated attacker with high privileges could execute arbitrary OS commands, leading to complete system compromise.

[Mitigation] Apply the official IBM security patches immediately and restrict network access to the management interface.

[Affected Scope] Cisco ASA Software and Cisco FTD Software with AnyConnect VPN or WebVPN configurations enabled

[Impact] An unauthenticated, remote attacker can retrieve sensitive memory contents (such as user credentials and session tokens) by sending crafted HTTP GET requests

[Mitigation] Apply the official firmware patches provided by Cisco immediately, or restrict access to the web services interface if patching is delayed

[Affected Scope] Amcrest and Dahua IP cameras and NVR devices with TCP port 37777 enabled

[Impact] Authenticated remote attackers can exploit this vulnerability to crash the device (DoS) or potentially execute arbitrary code (RCE)

[Mitigation] Apply the latest firmware updates immediately and restrict access to TCP port 37777 using firewalls

[Affected Scope] D-Link DWL-2600AP hardware Rev A, firmware version 4.2.0.15 and prior

[Impact] Authenticated attackers can execute arbitrary OS commands with root privileges via the Save Configuration functionality, leading to complete device compromise

[Mitigation] Apply the official firmware patch from the vendor, restrict access to the web management interface, or replace end-of-life devices

[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions 4.8.01090 and prior

[Impact] An authenticated local attacker can copy arbitrary malicious DLL files to system-level directories, leading to arbitrary code execution with SYSTEM privileges

[Mitigation] Immediately upgrade to the patched official release (version 4.8.02042 or later)

[Affected Scope] Systems running Microsoft .NET Framework versions 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, and Microsoft SharePoint Server.

[Impact] An unauthenticated remote attacker can execute arbitrary code with system privileges by sending a specially crafted XOML (XML Process Markup Language) file to the target server.

[Mitigation] Immediately apply the official Microsoft security patches and restrict untrusted XOML workflow compilation within your SharePoint environment.

[Affected Scope] SonicWall SMA100 series firmware versions 9.0.0.3-17sv and prior

[Impact] Unauthenticated remote attackers can exploit directory traversal to test for the presence of arbitrary files on the server, mapping out sensitive system structures

[Mitigation] Immediately upgrade the SMA100 firmware to the latest secure version (9.0.0.4 or higher) as recommended by SonicWall

[Affected Scope] Web-based management interface of certain Cisco Small Business RV Series Routers (including RV110W, RV130, RV130W, RV215W).

[Impact] An authenticated, remote attacker with valid credentials or an active session token can execute arbitrary commands with root privileges.

[Mitigation] Apply the official firmware updates from the vendor, or disable remote WAN management and restrict access to the web interface.

[Affected Scope] Microsoft Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the CLFS driver

[Impact] Local attackers can trigger kernel memory corruption to execute arbitrary code with SYSTEM privileges, leading to complete system takeover

[Mitigation] Apply the official Microsoft security patches immediately and monitor for unauthorized local access and anomalous CLFS log file creation

[Affected Scope] PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or Gateway enabled.

[Impact] An unauthenticated remote attacker can execute arbitrary code with root privileges on the target firewall, leading to complete system compromise.

[Mitigation] Immediately upgrade PAN-OS to patched versions (7.1.19, 8.0.12, 8.1.3, or later) and restrict access to GlobalProtect interfaces.

[Affected Scope] Legacy Windows operating systems including Windows 7, Windows Server 2008, and Windows Server 2008 R2 utilizing the Win32k component

[Impact] Local attackers can execute arbitrary code in kernel mode (SYSTEM privileges), completely compromising the host and bypassing security controls

[Mitigation] Immediately apply the official Microsoft cumulative security updates or migrate legacy systems to currently supported Windows versions

[Affected Scope] Microsoft SQL Server 2014, 2016, and 2017

[Impact] An authenticated attacker can execute arbitrary code under the security context of the SQL Server Database Engine service account, potentially leading to full system compromise

[Mitigation] Immediately apply the latest Cumulative Updates (CU) or Service Pack (SP) security patches provided by Microsoft

[Affected Scope] Microsoft Windows operating systems, including Windows 10 and Windows Server 2016/2019, utilizing the AppX Deployment Service (AppXSVC)

[Impact] Local authenticated attackers can execute specially crafted applications to run arbitrary processes in an elevated SYSTEM context, leading to full system compromise

[Mitigation] Apply the official cumulative security updates provided by Microsoft and restrict local interactive logon privileges for unauthorized users

[Affected Scope] Ubiquiti AirOS prior to v4.0.1 (802.11 ISP), v5.3.5 (AirMax), v5.4.5 (AirSync), and Nanostation5 devices

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a specially crafted HTTP GET request

[Mitigation] Immediately upgrade to the patched firmware versions and restrict external access to the web management interface