CVE Vulnerability Advisory Database

[Affected Scope] Embedded IoT devices utilizing Realtek Jungle SDK versions v2.x through v3.4.14B containing the 'MP Daemon' (UDPServer) diagnostic tool

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges or trigger memory corruption on the target device

[Mitigation] Apply the official vendor firmware patch, disable the UDPServer service, or restrict external access to the diagnostic UDP ports using firewall rules

[Affected Scope] Sunhillo SureLine versions prior to 8.7.0.1.1

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands on the target system using shell metacharacters

[Mitigation] Immediately upgrade Sunhillo SureLine to version 8.7.0.1.1 or later, and restrict external network access

[Affected Scope] End-of-life (EOL) SonicWall Secure Remote Access (SRA) appliances running all 8.x firmware and 9.0.0.9-26sv or earlier

[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via crafted payloads, potentially leading to credential theft, database compromise, and remote code execution (RCE)

[Mitigation] Since the affected products are EOL, immediately decommission the SRA appliances and migrate to supported SMA (Secure Mobile Access) series, or restrict external access via firewall rules

[Affected Scope] ForgeRock Access Manager (AM) versions prior to 7.0 (including OpenAM 14.6.3 and earlier)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending a single crafted HTTP request

[Mitigation] Immediately upgrade to ForgeRock AM 7.0 or later, or restrict external access to JATO-related endpoints such as /ccversion/*

[Affected Scope] SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before version 15.2.3 HF2

[Impact] Unauthenticated remote attackers can exploit this vulnerability to gain SYSTEM-level privileged access and execute arbitrary code on the host machine

[Mitigation] Immediately upgrade to Serv-U version 15.2.3 HF2 or later, and restrict external access to the service ports

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 on-premises deployments

[Impact] Attackers can elevate privileges to SYSTEM, enabling remote code execution (RCE) when chained with other ProxyShell vulnerabilities

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU), and restrict external access to Exchange IIS ports

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 on-premises deployments

[Impact] Unauthenticated attackers can bypass security controls to execute arbitrary PowerShell commands with SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU), and restrict external access to Exchange management ports

[Affected Scope] Kaseya VSA on-premise installations prior to version 9.5.7

[Impact] Attackers can extract agent credentials to obtain a valid session ID, bypassing authentication to gain unauthorized control over the system

[Mitigation] Immediately upgrade Kaseya VSA to version 9.5.7 or higher, and restrict external access to the dl.asp page

[Affected Scope] Checkbox Survey versions prior to 7.0, specifically affecting the CheckboxWeb.dll component

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges on the target server via untrusted data deserialization

[Mitigation] Immediately upgrade Checkbox Survey to version 7.0 or higher, and restrict external access to vulnerable endpoints

[Affected Scope] VMware vCenter Server versions 6.5, 6.7, and 7.0 with the default-enabled Virtual SAN Health Check plug-in

[Impact] An unauthenticated attacker with network access to port 443 can execute arbitrary commands with root privileges on the underlying operating system

[Mitigation] Apply official security patches immediately, or disable the vulnerable vSAN Health Check plug-in as a temporary workaround

[Affected Scope] QNAP HBS 3 (Hybrid Backup Sync) running on QTS, QuTS hero, and QuTScloud operating systems

[Impact] Unauthenticated remote attackers can exploit improper authorization to log in to the device with administrative privileges, potentially leading to full system compromise

[Mitigation] Immediately update HBS 3 to the patched versions and restrict external internet access to the NAS management interface

[Affected Scope] HTTP.sys services running on Windows 10 versions 2004, 20H2 and Windows Server versions 2004, 20H2

[Impact] Unauthenticated remote attackers can execute arbitrary code in the kernel context or trigger an immediate Blue Screen of Death (BSOD) leading to Denial of Service (DoS) by sending specially crafted HTTP packets

[Mitigation] Apply the official Microsoft cumulative security updates immediately, and restrict external exposure of HTTP.sys-dependent services prior to patching

[Affected Scope] Tenda AC11 wireless routers running firmware versions up to and including 02.03.01.104_CN

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP POST request

[Mitigation] Immediately upgrade to the latest patched firmware version and disable external WAN-side HTTP management interfaces

[Affected Scope] Systems running unpatched versions impacted by CVE-2021-32030

[Impact] The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authenticatio...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Systems running Cisco HyperFlex HX Data Platform with the web-based management interface enabled

[Impact] Unauthenticated, remote attackers can execute arbitrary system commands with root privileges on the affected device by sending crafted HTTP requests

[Mitigation] Immediately apply the official security patches provided by Cisco and restrict external access to the web management interface

[Affected Scope] Web-based management interface of Cisco HyperFlex HX Data Platform

[Impact] Unauthenticated, remote attackers can execute arbitrary OS commands with system privileges, leading to complete device compromise

[Mitigation] Apply official Cisco security patches immediately, or restrict network access to TCP ports 80/443 to trusted administrative networks

[Affected Scope] Buffalo WSR-2533DHPL2 (firmware version <= 1.02) and WSR-2533DHP3 (firmware version <= 1.24)

[Impact] Unauthenticated remote attackers can bypass authentication via path traversal to gain full administrative control over the device

[Mitigation] Immediately upgrade to the latest official firmware and disable external WAN-side management access

[Affected Scope] All GitLab Community Edition (CE) and Enterprise Edition (EE) versions starting from 11.9

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with the privileges of the GitLab user by uploading a specially crafted image file

[Mitigation] Immediately upgrade the GitLab instance to the latest patched versions (13.10.3, 13.9.6, 13.8.8, or higher)

[Affected Scope] Pulse Connect Secure 9.0R3/9.1R1 and higher

[Impact] Unauthenticated remote attackers can bypass authentication and execute arbitrary code with root privileges via Windows File Share Browser and Collaboration features

[Mitigation] Apply official vendor patches immediately, or import the mitigation XML workaround to disable vulnerable features

[Affected Scope] QNAP QTS (prior to 4.5.2, 4.5.1, 4.3.6, 4.3.4, 4.3.3, 4.2.6) and QuTS hero (prior to h4.5.1)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with elevated privileges on the compromised NAS device

[Mitigation] Immediately upgrade QNAP firmware to the patched versions and restrict external internet access to the NAS management interface