Cyber

What changed

A significant vulnerability has been discovered in the Progress Kemp LoadMaster product, specifically an OS command injection flaw. This vulnerability permits unauthenticated remote attackers to execute arbitrary commands on the system via the LoadMaster management interface.

• The vulnerability allows unauthorized access to sensitive system functions.
• Exploitation could lead to full system compromise.
• Immediate action is required to mitigate potential threats.

Who is affected

Organizations utilizing Progress Kemp LoadMaster are at risk due to this vulnerability. The following groups should be particularly vigilant:

• Enterprises relying on LoadMaster for load balancing and application delivery.
• IT departments managing network infrastructure that includes LoadMaster devices.
• Service providers offering hosting or cloud services using LoadMaster.

What to do

It is crucial for affected organizations to assess their systems and implement necessary security measures. Immediate steps include:

• Review and apply any available patches or updates from Progress.
• Limit access to the LoadMaster management interface to trusted IP addresses.
• Monitor logs for any unauthorized access attempts or unusual activity.

What changed

ConnectWise has disclosed a critical vulnerability in its ScreenConnect product, specifically versions 23.9.7 and earlier. This vulnerability allows for authentication bypass through an alternate path or channel, which could lead to unauthorized access to sensitive data and critical systems.

Who is affected

Organizations utilizing ConnectWise ScreenConnect versions 23.9.7 and prior are at risk. This vulnerability could have serious implications for any entity relying on this remote support software.

• ConnectWise ScreenConnect users
• IT service providers using ConnectWise products
• Organizations with remote access needs
• Businesses managing sensitive information remotely

What to do

It is crucial for affected users to take immediate action to mitigate risks associated with this vulnerability. Upgrading to the latest version of ConnectWise ScreenConnect is strongly recommended to ensure protection against potential exploitation.

• Upgrade to ConnectWise ScreenConnect version 23.9.8 or later.
• Review access controls and authentication mechanisms.
• Monitor systems for any unauthorized access attempts.
• Stay informed on security updates from ConnectWise.