Vulnerabilities - Rewterz

October 23, 2019

Rewterz Threat Advisory – ICS: Schneider Electric ProClima Multiple Vulnerabilities

Severity Medium Analysis Summary CVE-2019-6823 A code injection vulnerability could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. CVE-2019-6824 A buffer […]

October 21, 2019

Rewterz Threat Advisory – CVE-2019-13537 – AVEVA Vijeo Citect and Citect SCADA Server Side Crash Vulnerability

Severity Medium Analysis Summary The IEC870IP driver for Vijeo Citect and Citect SCADA has a buffer overflow that could cause a server-side crash. This vulnerability impacts […]

October 18, 2019

Rewterz Threat Alert – Vulnerable Corporate VPNs Exploited in the Wild

Severity High Analysis Summary Recently, Nation-state attackers targeted vulnerable VPN servers. Vulnerabilities in VPNs of renowned global brands were exploited in these campaigns. The vulnerabilities continue […]

October 18, 2019

Rewterz Threat Advisory – CVE-2019-0065 – Juniper Junos OS Vulnerability Could Allow for Denial of Service

Severity High Analysis Summary A vulnerability has been discovered in Juniper Junos OS, which could allow for denial of service. The vulnerability specifically affects MX Series […]

October 18, 2019

Rewterz Threat Advisory – Horner Automation Cscape Code Execution Vulnerabilities

Severity Medium Analysis Summary CVE-2019-13541 An improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may […]

October 17, 2019

Rewterz Threat Advisory – CVE-2019-15260 – Cisco Aironet Access Points Unauthorized Access Vulnerability

Severity High Analysis Summary The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could exploit this vulnerability by […]

October 16, 2019

Rewterz Threat Alert – Eternal Blue Trojan Upgraded to Detect & Exploit BlueKeep Vulnerability

Severity High Analysis Summary Eternal Blue Downloader Trojan has recently been updated adding the Bluekeep vulnerability (CVE-2019-0708) detection and utilization. CVE-2019-0708 is a RDP remote code […]

October 16, 2019

Rewterz Threat Advisory -WordPress 5.2.3 Multiple Vulnerabilities – Updates

Severity Medium Analysis Summary WordPress 5.2.3 and prior versions are affected by multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of […]

October 16, 2019

Rewterz Threat Advisory – CVE-2019-8071 – Adobe Download Manager Privilege Escalation Vulnerability

Severity High Analysis Summary Adobe Download Manager could allow a local attacker to gain elevated privileges on the system, caused by insecure file permissions. An attacker […]

Rewterz Threat Advisory – ICS: Schneider Electric ProClima Multiple Vulnerabilities

Rewterz Threat Advisory – CVE-2019-13537 – AVEVA Vijeo Citect and Citect SCADA Server Side Crash Vulnerability

Rewterz Threat Alert – Vulnerable Corporate VPNs Exploited in the Wild

Rewterz Threat Advisory – CVE-2019-0065 – Juniper Junos OS Vulnerability Could Allow for Denial of Service

Rewterz Threat Advisory – Horner Automation Cscape Code Execution Vulnerabilities

Rewterz Threat Advisory – CVE-2019-15260 – Cisco Aironet Access Points Unauthorized Access Vulnerability

Rewterz Threat Alert – Eternal Blue Trojan Upgraded to Detect & Exploit BlueKeep Vulnerability

Rewterz Threat Advisory -WordPress 5.2.3 Multiple Vulnerabilities – Updates

Rewterz Threat Advisory – CVE-2019-8071 – Adobe Download Manager Privilege Escalation Vulnerability

Security Operations Centers across the region

Saudi Arabia

UAE

Oman

Pakistan