Vulnerabilities - Rewterz

October 9, 2019

Rewterz Threat Advisory – GE Mark VIe Controller Multiple Vulnerabilities

Severity Medium Analysis Summary CVE-2019-13554 The affected product has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default […]

October 9, 2019

Rewterz Threat Advisory – CVE-2019-13529 – SMA Solar Technology AG Sunny WebBox Cross-site Request Forgery Vulnerability

Severity High Analysis Summary An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions […]

October 8, 2019

Rewterz Threat Advisory – Zero-day for old Joomla CMS versions

Severity Medium Analysis Summary A vulnerability in older versions of the Joomla content management system (CMS), a popular web-based application for building and managing websites. It’s […]

October 3, 2019

Rewterz Threat Advisory – Moxa EDR 810 Series Multiple Vulnerabilities

Severity Medium Analysis Summary CVE-2019-10969 An authenticated attacker may abuse the ping feature to execute unauthorized commands on the router, which could allow an attacker to […]

October 3, 2019

Rewterz Threat Advisory – Cisco Firepower Management Center SQL Injection Vulnerabilities

Severity High Analysis Summary CVE-2019-12679, CVE-2019-12680, CVE-2019-12681, CVE-2019-12682, CVE-2019-12683, CVE-2019-12684, CVE-2019-12685, CVE-2019-12686 These vulnerabilities exist due to improper input validation. An attacker could exploit these vulnerabilities […]

October 3, 2019

Rewterz Threat Advisory – CVE-2019-12689 – Cisco Firepower Management Center Remote Code Execution Vulnerability

Severity High Analysis Summary The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending malicious commands to the web-based management […]

October 2, 2019

Rewterz Threat Advisory – CVE-2019-6008 – ICS: Yokogawa Products Vulnerability

Severity High Analysis Summary Service paths in some Yokogawa applications are unquoted and contain spaces. This may allow a local attacker to execute malicious files by […]

October 1, 2019

Rewterz Threat Advisory – CVE-2019-16928 – Exim string_vformat function buffer overflow Vulnerability

Severity Medium Analysis Summary Exim is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the string_vformat function in string.c. By sending an […]

September 27, 2019

Rewterz Threat Advisory – CVE-2019-1955 – Cisco Email Security Appliance Header Injection Vulnerability

Severity Medium Analysis Summary The vulnerability is due to incomplete input and validation checking mechanisms for certain SPF messages that are sent to an affected device. […]

Rewterz Threat Advisory – GE Mark VIe Controller Multiple Vulnerabilities

Rewterz Threat Advisory – CVE-2019-13529 – SMA Solar Technology AG Sunny WebBox Cross-site Request Forgery Vulnerability

Rewterz Threat Advisory – Zero-day for old Joomla CMS versions

Rewterz Threat Advisory – Moxa EDR 810 Series Multiple Vulnerabilities

Rewterz Threat Advisory – Cisco Firepower Management Center SQL Injection Vulnerabilities

Rewterz Threat Advisory – CVE-2019-12689 – Cisco Firepower Management Center Remote Code Execution Vulnerability

Rewterz Threat Advisory – CVE-2019-6008 – ICS: Yokogawa Products Vulnerability

Rewterz Threat Advisory – CVE-2019-16928 – Exim string_vformat function buffer overflow Vulnerability

Rewterz Threat Advisory – CVE-2019-1955 – Cisco Email Security Appliance Header Injection Vulnerability

Security Operations Centers across the region

Saudi Arabia

UAE

Oman

Pakistan