Rewterz Threat Alert – Money Taker(Threat Actor) Activity Targeting Russian Federation Financial Sector
May 24, 2019Rewterz Threat Advisory – CVE-2019-1769 – Cisco NX-OS Software Line Card Command Injection Vulnerability
May 29, 2019Severity
Medium
Analysis Summary
Failure to sanitize input in the SSL VPN web portal may allow an attacker to perform a reflected Cross-site Scripting (XSS) attack via multiple parameters of the error page HTTP request.
Impact
Cross Site Scripting
Affected Vendors
Fortinet
Affected Products
Remediation
Upgrade to FortiOS 6.0.5 or 6.2.0.
Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.
