Aug 23, 2024
1 new incident, 1 with updates.
Started
- ClosedCriticalPatched
SonicWall SonicOS Improper Access Control
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash. Added to the CISA KEV catalog on 2024-09-09. CISA lists known use in ransomware campaigns.
SonicWall SonicOSClosed Sep 9, 2024
Updated
- ClosedMediumPatched
Versa Director Dangerous File Type Upload
The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to customize the user interface. The “Change Favicon” (Favorite Icon) enables the upload of a .png file, which can be exploited to upload a malicious file with a .png extension disguised as an image. Added to the CISA KEV catalog on 2024-08-23.
Versa DirectorClosed Aug 23, 2024
