CVE Vulnerability Advisory Database

[Affected Scope] Android OS System Framework

[Impact] Local attackers can bypass background activity launch restrictions to execute arbitrary activities without user interaction, leading to local privilege escalation

[Mitigation] Apply the Google Android September 2023 Security Patch or update to the latest vendor-provided firmware immediately

[Affected Scope] ASUS RT-AX55 devices running firmware version 3.0.0.4.386.51598 and prior.

[Impact] Authenticated attackers can execute arbitrary system commands with root privileges, leading to complete device compromise.

[Mitigation] Immediately upgrade to the latest official secure firmware version and disable remote WAN management.

[Affected Scope] Apple iOS and iPadOS prior to 16.6.1, macOS Monterey prior to 12.6.9, macOS Ventura prior to 13.5.2, iOS/iPadOS prior to 15.7.9, and macOS Big Sur prior to 11.7.10

[Impact] Processing a maliciously crafted image can trigger a buffer overflow, leading to arbitrary code execution (RCE) and potential system takeover

[Mitigation] Immediately apply the official security updates (iOS 16.6.1, macOS 13.5.2, etc.) and consider enabling Lockdown Mode for high-risk environments

[Affected Scope] Apple iOS devices prior to 16.6.1, iPadOS devices prior to 16.6.1, and watchOS devices prior to 9.6.2

[Impact] A maliciously crafted attachment can bypass validation logic, allowing attackers to execute arbitrary code with system privileges without user interaction

[Mitigation] Immediately update affected devices to iOS 16.6.1, iPadOS 16.6.1, watchOS 9.6.2, or later versions

[Affected Scope] Remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software.

[Impact] Improper AAA separation allows unauthenticated remote attackers to conduct brute-force attacks to identify valid credentials or establish unauthorized clientless SSL VPN sessions.

[Mitigation] Apply official software updates from Cisco, or implement workarounds by redirecting default connection profile authentication to a loopback address and enforcing MFA.

[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) prior to version 116.0.5845.179

[Impact] A remote attacker can execute arbitrary code and compromise the target system by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update your browser to the latest stable version (116.0.5845.179 or higher)

[Affected Scope] Qlik Sense Enterprise for Windows (May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier)

[Impact] An unauthenticated remote attacker can exploit a path traversal vulnerability to generate an anonymous session and transmit unauthorized HTTP requests to internal endpoints

[Mitigation] Immediately upgrade to the official patched versions (August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, or August 2022 Patch 13 and later)

[Affected Scope] Qlik Sense Enterprise for Windows (May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier)

[Impact] A remote attacker can elevate privileges and execute unauthorized commands on the backend repository application by tunneling malicious HTTP requests.

[Mitigation] Immediately upgrade to the patched versions: August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, or August 2022 Patch 13.

[Affected Scope] KNX-based smart home and building automation devices supporting KNX Connection Authorization and Option 1

[Impact] Attackers can set an unauthorized BCU key via network or physical access, permanently locking and bricking the device (Denial of Service)

[Mitigation] Restrict network exposure of KNX IP interfaces, enable KNX Secure features, and enforce strict physical access controls

[Affected Scope] All Windows endpoint environments running RARLAB WinRAR versions prior to 6.23.

[Impact] Attackers can execute arbitrary code in the background when a user attempts to open a seemingly benign file within a crafted ZIP archive, leading to full system compromise.

[Mitigation] Immediately upgrade WinRAR to version 6.23 or higher, and restrict execution of untrusted archive files.

[Affected Scope] Ivanti MobileIron Sentry versions 9.18.0 and below with MICS (Mobile IT Connector System) Admin Portal enabled

[Impact] Unauthenticated attackers can bypass authentication controls on the administrative interface, leading to remote code execution (RCE) and full system compromise

[Mitigation] Immediately apply the official vendor patches and restrict external access to the MICS administrative port (default TCP 8443)

[Affected Scope] Juniper Networks Junos OS on EX Series switches with J-Web interface enabled in specific versions

[Impact] Unauthenticated, network-based attackers can upload arbitrary files via J-Web by targeting 'installAppPackage.php', compromising file system integrity and potentially chaining with other flaws for Remote Code Execution (RCE)

[Mitigation] Upgrade Junos OS to the recommended patched releases, or immediately disable the J-Web service and restrict management access

[Affected Scope] Juniper Networks Junos OS SRX Series firewalls with the J-Web interface enabled

[Impact] Unauthenticated remote attackers can upload arbitrary files via crafted HTTP requests to the file system, compromising integrity and potentially chaining with other flaws to achieve Remote Code Execution (RCE)

[Mitigation] Apply the latest Junos OS security updates immediately, or disable the J-Web interface and restrict access to trusted management IP ranges

[Affected Scope] Juniper Networks Junos OS on EX Series switches and SRX Series firewalls with the J-Web interface enabled

[Impact] An unauthenticated, network-based attacker can modify the PHP execution environment (PHPRC) via crafted HTTP requests, leading to arbitrary code execution and full device compromise

[Mitigation] Immediately upgrade Junos OS to the patched versions, or disable the J-Web interface and restrict access to trusted IP addresses as a temporary workaround

[Affected Scope] Juniper Networks Junos OS EX Series switches with the J-Web interface enabled

[Impact] Unauthenticated, network-based attackers can manipulate PHP environment variables, potentially leading to unauthorized file uploads and remote code execution (RCE) when chained

[Mitigation] Apply the latest Junos OS security patches immediately, or disable the J-Web service / restrict access to trusted IP addresses

[Affected Scope] Ivanti EPMM (Endpoint Manager Mobile) 11.10 and older, and MobileIron Core 11.2 and older

[Impact] Unauthenticated remote attackers can bypass authentication to access restricted API endpoints, compromise sensitive data, or execute arbitrary commands

[Mitigation] Immediately upgrade to the latest supported release and restrict external access to administrative API endpoints

[Affected Scope] Apple iOS/iPadOS prior to 15.6, macOS Monterey prior to 12.5, Safari prior to 15.6, watchOS prior to 8.7, and tvOS prior to 15.6

[Impact] Processing maliciously crafted web content may allow remote attackers to execute arbitrary code on the target system

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to patched versions

[Affected Scope] .NET 6.0, .NET 7.0, ASP.NET Core, and Microsoft Visual Studio 2022 environments

[Impact] Unauthenticated remote attackers can trigger resource exhaustion (CPU/Memory) via crafted HTTP requests, leading to a complete Denial of Service (DoS)

[Mitigation] Immediately update the .NET SDK/Runtime and Visual Studio to the latest patched versions

[Affected Scope] ZKTeco ZKBioTime v8.5.5 and all versions prior to 9.0.120240617.19506

[Impact] Unauthenticated remote attackers can read arbitrary sensitive system files by sending a crafted payload to the vulnerable API endpoint

[Mitigation] Immediately upgrade to the patched version (9.0.120240617.19506 or higher) and restrict external access to the application

[Affected Scope] Ivanti EPMM versions 11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2, and 11.8.x < 11.8.1.2

[Impact] An authenticated administrator can write arbitrary files to the appliance via path traversal, potentially leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to the admin portal