CVE Vulnerability Advisory Database

[Affected Scope] Erlang/OTP versions prior to OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20

[Impact] Unauthenticated remote attackers can exploit a flaw in SSH protocol message handling to execute arbitrary commands and gain full system control without valid credentials

[Mitigation] Immediately upgrade Erlang/OTP to patched versions (OTP-27.3.3, OTP-26.2.5.11, or OTP-25.3.2.20) or temporarily disable the SSH server and restrict access via firewall rules

[Affected Scope] Langflow versions prior to 1.3.0

[Impact] A remote, unauthenticated attacker can execute arbitrary Python code and fully compromise the host system by sending crafted HTTP requests.

[Mitigation] Immediately upgrade Langflow to version 1.3.0 or later, and restrict external access to the vulnerable endpoint.

[Affected Scope] SimpleHelp remote support software v5.5.7 and prior

[Impact] Unauthenticated remote attackers can download arbitrary sensitive files, including server configuration files, secrets, and hashed user credentials, via crafted HTTP requests

[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and restrict external access to the console until patched

[Affected Scope] Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.24

[Impact] Unauthenticated remote attackers can leverage default settings of the Autorun directory to import and execute arbitrary Bash or PowerShell commands on the host system, leading to full system compromise.

[Mitigation] Immediately upgrade to the patched version (5.8.0.24 or higher) and restrict access to exposed management interfaces.

[Affected Scope] NuPoint Unified Messaging (NPM) component within Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201)

[Impact] Unauthenticated remote attackers can exploit insufficient input validation to perform path traversal, allowing unauthorized access to view, corrupt, or delete user data and system configurations

[Mitigation] Immediately upgrade to the latest patched version provided by the vendor, and restrict external access to management interfaces

[Affected Scope] Progress WhatsUp Gold versions released before 2024.0.0

[Impact] An unauthenticated remote attacker can execute arbitrary SQL queries to retrieve sensitive database information, including encrypted user password hashes

[Mitigation] Immediately upgrade WhatsUp Gold to version 2024.0.0 or later and restrict database and web console access

[Affected Scope] Progress WhatsUp Gold versions prior to 2023.1.3

[Impact] Unauthenticated remote attackers can execute arbitrary commands with 'iisapppool\ mconsole' privileges, leading to full system compromise

[Mitigation] Immediately upgrade WhatsUp Gold to version 2023.1.3 or later and restrict external access

[Affected Scope] TP-Link Archer AX21 (AX1800) firmware versions prior to 1.1.4 Build 20230219

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a specially crafted HTTP POST request

[Mitigation] Immediately upgrade to firmware version 1.1.4 Build 20230219 or later, and disable remote WAN management

[Affected Scope] Ruckus Wireless Admin and AP controller devices running version 10.4 or lower

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP GET request

[Mitigation] Immediately apply the official vendor firmware patches and restrict access to the management interface from the public internet

[Affected Scope] Citrix ADC and Citrix Gateway versions 12.1 and 13.0 with SAML SP or IdP configuration enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code on the target appliance and gain full system control by sending specially crafted requests

[Mitigation] Immediately upgrade to the patched firmware versions (12.1-65.25, 13.0-88.16, or higher) provided by Citrix

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0.

[Impact] Unauthenticated remote attackers can inject arbitrary Memcached commands, leading to cache poisoning, session hijacking, and credential theft.

[Mitigation] Immediately apply the official Zimbra security patches (9.0.0 Patch 24 / 8.8.15 Patch 31 or higher).

[Affected Scope] WatchGuard Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2 on Firebox and XTM appliances

[Impact] An unauthenticated remote attacker can execute arbitrary code with administrative privileges, leading to complete compromise of the firewall appliance

[Mitigation] Immediately upgrade Fireware OS to the patched versions (12.7.2_U2, 12.5.9_U2, 12.1.3_U8 or higher) and restrict external access to management interfaces

[Affected Scope] VMware Workspace ONE UEM console versions 20.0.8 (prior to 20.0.8.37), 20.11.0 (prior to 20.11.0.40), 21.2.0 (prior to 21.2.0.27), and 21.5.0 (prior to 21.5.0.37).

[Impact] An unauthenticated remote attacker with network access to the UEM console can send crafted requests to access sensitive internal resources and information.

[Mitigation] Apply the official cumulative patches immediately or implement IIS URL Rewrite rules to block external access to the vulnerable endpoints.

[Affected Scope] Yealink Device Management (DM) server version 3.6.0.20 and prior.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted requests to a vulnerable API endpoint.

[Mitigation] Immediately apply the latest official security patches and restrict external internet access to the management console.

[Affected Scope] DrayTek VigorConnect version 1.6.0-B3 and prior

[Impact] Unauthenticated remote attackers can download arbitrary system files with root privileges via directory traversal

[Mitigation] Immediately upgrade VigorConnect to the latest patched version (1.6.0-RC1 or higher) and restrict access to the management interface

[Affected Scope] DrayTek VigorConnect version 1.6.0-B3 and prior

[Impact] Unauthenticated remote attackers can download arbitrary system files with root privileges, leading to full exposure of sensitive host operating system data

[Mitigation] Immediately upgrade VigorConnect to the latest secure version and restrict access to the management interface from the public internet

[Affected Scope] Sunhillo SureLine versions prior to 8.7.0.1.1

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands on the target system using shell metacharacters

[Mitigation] Immediately upgrade Sunhillo SureLine to version 8.7.0.1.1 or later, and restrict external network access

[Affected Scope] All GitLab versions starting from 10.5 where internal network requests for webhooks are enabled

[Impact] Unauthenticated attackers can bypass registration restrictions to trigger SSRF, accessing sensitive internal network resources and metadata

[Mitigation] Upgrade to the latest patched GitLab version immediately, or disable the 'Allow requests to the local network from web hooks and services' setting

[Affected Scope] SaltStack Salt versions before 2019.2.4 and 3000 before 3000.2

[Impact] Unauthenticated remote attackers can bypass authentication via the ClearFuncs class to retrieve master tokens or execute arbitrary commands on connected salt minions

[Mitigation] Immediately upgrade SaltStack to patched versions (2019.2.4, 3000.2, or higher) and restrict access to salt-master ports (4505, 4506)

[Affected Scope] All PlaySMS installations running versions prior to 1.4.3

[Impact] Unauthenticated remote attackers can inject malicious template payloads to execute arbitrary operating system commands, leading to full system compromise

[Mitigation] Immediately upgrade to PlaySMS version 1.4.3 or higher, restrict external access, and deploy Web Application Firewall (WAF) rules