CVE Vulnerability Advisory Database

[Affected Scope] All Check Point Quantum Security Gateway versions with VPN Blade enabled.

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges, leading to full gateway compromise.

[Mitigation] Immediately apply the latest Jumbo Hotfix and enforce strict certificate validation policies.

[Affected Scope] Palo Alto Networks PAN-OS software with GlobalProtect portal or gateway enabled (Panorama and Cloud NGFW are not impacted).

[Impact] Unauthenticated attackers can bypass security restrictions to establish unauthorized VPN connections and gain access to internal network resources.

[Mitigation] Apply the official security patches immediately, and restrict access to GlobalProtect interfaces until fully patched.

[Affected Scope] All Array Networks ArrayOS AG appliances running versions prior to 9.4.5.9

[Impact] High-privileged attackers can execute arbitrary OS commands, leading to complete system compromise and webshell deployment

[Mitigation] Immediately upgrade ArrayOS AG to version 9.4.5.9 or higher and audit system logs for indicators of compromise

[Affected Scope] WatchGuard Firebox appliances running Fireware OS with IKEv2 Mobile User VPN or Branch Office VPN (BOVPN) configured with a dynamic gateway peer (including legacy configurations where static peers remain active)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending specially crafted IKEv2 packets, leading to complete compromise of the appliance

[Mitigation] Immediately upgrade to the patched Fireware OS version, or temporarily disable IKEv2 VPN services and restrict access to trusted IP addresses

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software with Remote Access VPN (RAVPN) service enabled

[Impact] Unauthenticated, remote attackers can exhaust system resources by flooding VPN authentication requests, leading to a Denial of Service (DoS) of the RAVPN service and potentially requiring a device reload

[Mitigation] Apply official Cisco security patches immediately, configure connection rate limiting, and block malicious brute-force IP addresses

[Affected Scope] Check Point Security Gateways connected to the internet with Remote Access VPN or Mobile Access Software Blades enabled

[Impact] Unauthenticated remote attackers can read sensitive system files (e.g., /etc/shadow, password hashes, configuration files), potentially leading to credential theft and full network compromise

[Mitigation] Immediately apply the official hotfix provided in Check Point Advisory sk182336, audit system logs for IoCs, and rotate all sensitive credentials

[Affected Scope] Remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software.

[Impact] Improper AAA separation allows unauthenticated remote attackers to conduct brute-force attacks to identify valid credentials or establish unauthorized clientless SSL VPN sessions.

[Mitigation] Apply official software updates from Cisco, or implement workarounds by redirecting default connection profile authentication to a loopback address and enforcing MFA.

[Affected Scope] Zyxel ZyWALL/USG (4.60 to 4.73), VPN (4.60 to 5.35), USG FLEX (4.60 to 5.35), and ATP (4.60 to 5.35) series firmware

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges by sending crafted IKE UDP packets to the affected device

[Mitigation] Immediately upgrade to the latest official patched firmware version and restrict access to IKE ports (UDP 500/4500) from untrusted WAN interfaces

[Affected Scope] Pulse Connect Secure (PCS) versions prior to 9.1R11.4

[Impact] A remote authenticated attacker can exploit the Windows Resource Profiles feature to execute arbitrary commands with root privileges on the VPN gateway, potentially compromising the internal network

[Mitigation] Immediately upgrade Pulse Connect Secure to version 9.1R11.4 or higher, apply the official XML workaround template, and perform compromise assessment

[Affected Scope] Pulse Connect Secure versions prior to 9.1R11.4

[Impact] A remote authenticated attacker can execute arbitrary code with root privileges on the target system via a maliciously crafted meeting room.

[Mitigation] Immediately upgrade Pulse Connect Secure to version 9.1R11.4 or higher, and disable unused Meeting Room features.

[Affected Scope] Zyxel USG, ATP, VPN, and ZyWALL series firewalls and AP controllers running ZLD firmware version 4.60

[Impact] Remote attackers can gain full administrative access to the device's SSH server or web interface using an undocumented hardcoded account ('zyfwp')

[Mitigation] Immediately upgrade to ZLD v4.60 Patch 1 or later, and restrict WAN-side access to management interfaces (SSH/HTTPS).