✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Advisory – ICS: Siemens Nucleus Products IPv6 Stack

April 15, 2021
Rewterz

Rewterz Threat Advisory – McAfee (DLP) Endpoint for Windows Vulnerabilities

April 15, 2021

Rewterz Threat Advisory – Multiple Kubernetes Vulnerabilites

Severity

Medium

Analysis Summary

CVE-2021-20291

The malware affects the Go library called “containers/storage.” It is triggered when a malicious image is placed inside the registry, and a DoS condition is initiated when the image is pulled from the registry by an unwitting user. Malicious actors can jeopardize any containerized infrastructure that relies on vulnerable container engines like Kubernetes and OpenShift.


CVE-2021-25735

Kubernetes Kube-apiserver allows a remote authenticated attacker to bypass security restrictions that are caused when performing note updates. By sending a specially crafted request, an attacker could exploit this vulnerability to bypass a Validating Admission Webhook.

Impact

  • Denial of service
  • Security bypass

Affected Vendors

Kubernetes

Affected Products

  • Kubernetes kube-apiserver 1.18.17
  • Kubernetes kube-apiserver 1.19.0
  • Kubernetes kube-apiserver 1.19.9
  • Kubernetes kube-apiserver 1.20.0

Remediation

Upgrade to the latest version of Kube-apiserver (1.18.18, 1.19.10, 1.20.6, 1.21.0 or later)

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo