Vulnerabilities - Rewterz

November 26, 2019

Rewterz Threat Advisory – CVE-2018-9195 – Hardcoded Cryptographic Key in the FortiGuard Services Communication Protocol Information Disclosure Vulnerability

Severity High Analysis Summary Use of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow a Man in the middle with knowledge of […]

November 21, 2019

Rewterz Threat Advisory – Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Severity Medium Analysis Summary Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could result in arbitrary code execution. These vulnerabilities can […]

November 21, 2019

Rewterz Threat Advisory – Flexera FlexNet Publisher Memory Corruption Vulnerabilities

Severity High Analysis Summary CVE-2018-20031 A vulnerability related to preemptive item deletion in lmgrd and vendor daemon components allows a remote attacker to send a combination […]

November 21, 2019

Rewterz Threat Advisory – Linux Webmin Servers Being Attacked by New P2P Roboto Botnet

Severity High Analysis Summary Linux servers running unpatched Webmin installations are under attack and slowly getting added to a new peer-to-peer (P2P) botnet dubbed Roboto by […]

November 18, 2019

Rewterz Threat Advisory – CVE-2019-13945 – ICS: Undocumented access feature in Siemens SIMATIC PLCs Code Execution Vulnerability

Severity Medium Analysis Summary There is an access mode used during manufacturing of S7-1200 CPUs that allows additional diagnostic functionality. Using this functionality requires physical access […]

November 15, 2019

Rewterz Threat Advisory -CVE-2019-13945 – ICS: Siemens S7-1200 CPU

Severity Medium Analysis Summary An attacker with physical access to the UART interface could access additional diagnostic functionality. Successful exploitation could compromise confidentiality, integrity, and availability […]

November 15, 2019

Rewterz Threat Advisory – CVE-2019-13939 – ICS: Siemens Mentor Nucleus Networking Module

Severity Medium Analysis Summary By sending specially crafted DHCP packets to a device, an attacker may be able to affect availability and integrity of the device. […]

November 14, 2019

Rewterz Threat Advisory – CVE-2019-11135 – Intel CPUs Vulnerable to Variant 2 of #ZombieLoad Attack

Severity Medium Analysis Summary CVE-2019-11135 – TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure […]

November 13, 2019

Rewterz Threat Advisory – Update fixes IE 0-day RCE vulnerability and 74 other flaws in Microsoft Products

Severity High Analysis Summary Microsoft has released November updates to fix 75 security flaws in multiple products. CVE-2019-1429 – Scripting Engine Memory Corruption Vulnerability could allow an […]

Rewterz Threat Advisory – CVE-2018-9195 – Hardcoded Cryptographic Key in the FortiGuard Services Communication Protocol Information Disclosure Vulnerability

Rewterz Threat Advisory – Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Rewterz Threat Advisory – Flexera FlexNet Publisher Memory Corruption Vulnerabilities

Rewterz Threat Advisory – Linux Webmin Servers Being Attacked by New P2P Roboto Botnet

Rewterz Threat Advisory – CVE-2019-13945 – ICS: Undocumented access feature in Siemens SIMATIC PLCs Code Execution Vulnerability

Rewterz Threat Advisory -CVE-2019-13945 – ICS: Siemens S7-1200 CPU

Rewterz Threat Advisory – CVE-2019-13939 – ICS: Siemens Mentor Nucleus Networking Module

Rewterz Threat Advisory – CVE-2019-11135 – Intel CPUs Vulnerable to Variant 2 of #ZombieLoad Attack

Rewterz Threat Advisory – Update fixes IE 0-day RCE vulnerability and 74 other flaws in Microsoft Products

Security Operations Centers across the region

Saudi Arabia

UAE

Oman

Pakistan