Cyber

What changed

A newly identified vulnerability in Adobe Commerce and Magento has been disclosed, characterized as an Improper Neutralization of Special Elements Used in a Template Engine. This flaw could enable attackers to execute arbitrary code within the context of the current user, significantly increasing the risk of unauthorized actions.

Importantly, exploitation of this vulnerability does not require any user interaction, making it particularly dangerous.

Who is affected

The following products and vendors are impacted by this vulnerability:

Adobe Commerce and Magento users are at risk, particularly those utilizing versions that have not been patched against this vulnerability.

• Adobe Commerce
• Magento
• Online retailers using these platforms
• Developers maintaining sites on these platforms

What to do

It is crucial for affected users to assess their systems for the presence of this vulnerability. Immediate action should be taken to apply any available patches or updates from Adobe.

Regularly monitor security advisories from Adobe and implement best practices for secure coding to mitigate risks associated with such vulnerabilities.

• Update Adobe Commerce and Magento to the latest versions.
• Review security configurations and coding practices.
• Monitor for any unusual activity that may indicate exploitation attempts.

What changed

MikroTik RouterOS has been identified with a significant vulnerability related to improper neutralization of argument delimiters in its command handling. This flaw specifically affects the SSH login process, where usernames starting with certain prohibited characters can manipulate the RouterOS policy mask, leading to unauthorized privilege escalation.

The issue was addressed in the following versions: 6.49.21 (Long-term), 7.23.4 (Long-term), and 7.24.2 (Stable).

Who is affected

Organizations utilizing MikroTik RouterOS are at risk, particularly those with SSH access configured. The vulnerability can be exploited by unauthenticated users, making it critical for all users to assess their exposure.

Affected products include various versions of MikroTik RouterOS, particularly those prior to the patched releases.

• MikroTik RouterOS versions prior to 6.49.21, 7.23.4, and 7.24.2
• Organizations relying on MikroTik for network infrastructure
• Network administrators managing MikroTik devices

What to do

It is imperative for users of MikroTik RouterOS to upgrade to the latest versions to mitigate the risk associated with this vulnerability. Regularly reviewing and updating network device firmware is a best practice to ensure security.

Additionally, organizations should monitor their SSH access configurations and consider implementing additional security measures such as limiting SSH access to trusted IPs.

• Upgrade RouterOS to version 6.49.21, 7.23.4, or 7.24.2 or later
• Review SSH access settings and restrict access as necessary
• Implement network monitoring to detect unauthorized access attempts