CVE Vulnerability Advisory Database

[Affected Scope] On-premises Microsoft Exchange Server 2013, 2016, and 2019 without the latest Cumulative Updates (CU) and Security Updates (SU)

[Impact] Unauthenticated remote attackers can bypass authentication, abuse Exchange Admin Center (EAC) APIs to write arbitrary files, and execute malicious code with SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU), and perform a thorough compromise assessment

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019

[Impact] Attackers can execute arbitrary code with SYSTEM privileges, leading to full compromise of the mail server

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU)

[Affected Scope] On-premises Microsoft Exchange Server 2013, 2016, and 2019

[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive mailbox data, and chain with other vulnerabilities to execute arbitrary code (RCE)

[Mitigation] Immediately apply the official Microsoft Cumulative Update (CU) and Security Update (SU), or implement IIS URL Rewrite rules to block malicious requests

[Affected Scope] Veritas Backup Exec Remote Agent installed on Windows and Linux systems prior to version 21.2

[Impact] Attackers can bypass authentication via flaws in the SHA Authentication scheme, gaining unauthorized access to execute data management commands with System privileges, leading to arbitrary file access and remote code execution

[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, and restrict network access to the NDMP port (TCP 10000)

[Affected Scope] VMware vCenter Server versions 7.0, 6.7, 6.5 and VMware Cloud Foundation versions 4.x, 3.x

[Impact] Unauthenticated remote attackers with network access to port 443 can execute arbitrary commands with unrestricted privileges on the underlying operating system

[Mitigation] Immediately upgrade to the patched versions or apply the official workaround to disable the vulnerable plugin

[Affected Scope] Accellion FTA versions 9_12_370 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands and gain full system control by sending crafted POST requests to various admin endpoints

[Mitigation] Immediately upgrade to Accellion FTA version 9_12_380 or later, or migrate to a supported secure file transfer platform

[Affected Scope] Nagios XI version 5.7.5

[Impact] An authenticated attacker can execute arbitrary OS commands on the Nagios XI server via a single crafted HTTP request, potentially leading to full system compromise.

[Mitigation] Immediately upgrade Nagios XI to a patched version (5.8.0 or higher), or disable/restrict access to the vulnerable configuration wizard.

[Affected Scope] Nagios XI version 5.7.5

[Impact] An authenticated attacker can execute arbitrary OS commands on the Nagios XI server via a single crafted HTTP request, potentially leading to full system compromise.

[Mitigation] Immediately upgrade to the latest patched version of Nagios XI, and restrict access to the vulnerable configuration wizard path.

[Affected Scope] Nagios XI version 5.7.5

[Impact] Authenticated attackers can execute arbitrary OS commands on the Nagios XI server via a single crafted HTTP request, leading to complete system compromise.

[Mitigation] Immediately upgrade Nagios XI to the latest secure version (5.8.0 or higher) and restrict access to the web console.

[Affected Scope] Micro Focus Operations Bridge Reporter (OBR) version 10.40.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the OBR server, leading to complete system compromise.

[Mitigation] Apply the official vendor security patch (KM03775947) immediately and restrict external access to the OBR management ports.

[Affected Scope] D-Link DNS-320 ShareCenter NAS devices (Firmware v2.06B01 Revision Ax and prior)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests, leading to full system compromise

[Mitigation] Since this product is End-of-Life (EOL), immediately isolate the device from the network and replace it with a supported model

[Affected Scope] D-Link DIR-825 R1 devices running firmware versions up to 3.0.1 before 2020-11-20

[Impact] Remote unauthenticated attackers can execute arbitrary code with root privileges by sending crafted HTTP requests, leading to complete device compromise

[Mitigation] Apply the latest official firmware patch immediately, disable WAN-side remote management, or replace end-of-life hardware

[Affected Scope] ONLYOFFICE Document Server versions prior to 5.6.3 (when JWT is enabled)

[Impact] Attackers can achieve Remote Code Execution (RCE) by uploading malicious files to arbitrary directories.

[Mitigation] Immediately update ONLYOFFICE Document Server to version 5.6.3 or later.

[Affected Scope] PHP applications and frameworks (including Drupal) utilizing PEAR Archive_Tar versions 1.4.11 and prior

[Impact] Remote attackers can exploit inadequate symbolic link validation to perform directory traversal, writing arbitrary files to the system and potentially achieving Remote Code Execution (RCE)

[Mitigation] Immediately upgrade the PEAR Archive_Tar package to version 1.4.12 or higher, and restrict archive file uploads and extraction paths

[Affected Scope] Google Chrome prior to version 81.0.4044.92

[Impact] Remote attackers can execute arbitrary code or compromise the browser sandbox via a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (81.0.4044.92 or higher)

[Affected Scope] Laravel applications running versions prior to 8.4.2 and utilizing facade/ignition versions prior to 2.5.2 with debug mode (APP_DEBUG=true) enabled

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code on the target server, leading to complete system compromise and data exfiltration

[Mitigation] Upgrade the facade/ignition package to version 2.5.2 or higher, and ensure that Laravel debug mode (APP_DEBUG) is set to 'false' in production environments

[Affected Scope] Apache Struts framework versions 2.0.0 through 2.5.25

[Impact] Unauthenticated remote attackers can execute arbitrary code on the host system by exploiting forced double OGNL evaluation in tag attributes

[Mitigation] Immediately upgrade Apache Struts to version 2.5.26 or higher, and avoid evaluating raw user input inside Struts tag attributes

[Affected Scope] Microsoft Exchange Server 2010 Service Pack 3, 2013, 2016, and 2019

[Impact] An authenticated attacker can send specially crafted payloads to execute arbitrary code with SYSTEM privileges, leading to full server compromise

[Mitigation] Immediately apply the official Microsoft security updates and restrict external access to Exchange management interfaces

[Affected Scope] Legacy Apple operating systems prior to iOS 14.2, macOS Catalina 10.15.7, and watchOS 7.1

[Impact] Processing a maliciously crafted font file triggers an out-of-bounds write (CWE-787), leading to arbitrary remote code execution (RCE)

[Mitigation] Immediately apply the official security patches provided by Apple (iOS 14.2, macOS Big Sur 11.0.1, or later)

[Affected Scope] VMware Workspace ONE Access, Access Connector, Identity Manager, and Identity Manager Connector

[Impact] An authenticated attacker with administrative access to the configurator interface can execute arbitrary OS commands with escalated privileges

[Mitigation] Apply the official security patches specified in VMware Advisory VMSA-2020-0027 immediately, or implement the recommended workaround scripts