Every week, we catalog the major industrial cybersecurity vulnerabilities and updates you should know about. Here are the notable threats from the week of July 25 - 31. Sign up to get these updates right to your inbox!
Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 are vulnerable to an attacker escalating privileges on affected installations.
Sources: nvd.nist.gov
The NSA released an information sheet about cybersecurity addressing wireless devices in public settings. It explains how to identify possible public connection vulnerabilities and how to protect devices and data better.
Sources: nsa.gov
Due to an unsafe deserialization flaw, the IBM Partner Engagement Manager 2.0 is vulnerable to an attacker sending arbitrary code on the system.
Sources: cve.mitre.org
Versions 18.x,19.x prior to 19.3.0.4 and 19.4.0.0 contain an Information Disclosure in Log Files vulnerability, which means that an attacker could read sensitive information in log files.
Sources: nvd.nist.gov
The PHP Mess Detector before 1.3.0 for Visual Studio Code is vulnerable to attackers putting arbitrary code into a workspace folder.
Sources: nvd.nist.gov
The encryption key exchange for PowerVM Hypervisor FW920, FW930, FW940 and FW950 could be hacked, and an attacker could decrypt the stolen migration traffic.
Sources: nvd.nist.gov
There is an Industrial Control Systems (ICS) advisory from CISA for the Geutebruck G-CAM E2 devices and Encoder G-Code versions. The vulnerabilities include missing authentication for critical function, command injection and stack-based buffer overflow, which would allow an attacker to take control of an affected system remotely.
Sources: us-cert.cisa.gov
For products such as the MacOS Big SUR, IOS 14.7.1 and iPad 14.7.1, there have been updates made available to deter any exploitation of memory corruption and allowing execution of arbitrary code with kernel privileges.
Sources: support.apple.com
In response to a PetitPotam threat, Microsoft has released a statement on how to prevent NTLM relay attacks. Using certificate authority web enrollment and certificate enrollment web service would leave a user vulnerable without the necessary settings.
Sources: support.microsoft.com
