Every week, we catalog the major industrial cybersecurity vulnerabilities and updates you should know about. Here are the notable threats from the week of August 29 - September 4. Sign up to get these updates right to your inbox!
Atlassian released security updates for the Confluence server and data center to address a remote code execution vulnerability. Without the updates, a remote attacker could take control of an affected system.
Sources: confluence.atlassian.com
Cisco released security updates for Cisco Enterprise Network Function Virtualization Infrastructure Software (NFVIS) to address a vulnerability that could lead to an attacker taking control of an affected system.
Sources: tools.cisco.com
There is an elevation of privilege vulnerability.
Sources: msrc.microsoft.com
Some Acrobat Reader DC versions are affected by an out-of-bounds read vulnerability that could let an attacker achieve arbitrary code execution.
Sources: nvd.nist.gov
Versions 18.2.1 and earlier of Adobe After Effects are affected by an out-of-bounds read vulnerability when parsing a specially crafted file, which could let an attacker disclose arbitrary memory information.
Sources: helpx.adobe.com
There is a CWE-476: NULL Pointer Dereference vulnerability that could cause a denial-of-service on the Modicon PLC controller and simulator when updating the controller application.
Sources: download.schneider-electric.com
Google released security updates for Chrome for Windows, Mac and Linux to address a vulnerability that could lead an attacker to take control of an affected system.
Sources: chromereleases.googleblog.com
Researchers have released 16 security vulnerabilities, which would allow an attacker to remotely shut down a headset or speaker and allow an attacker to execute arbitrary code in a controller.
Sources: techxplore.com
