ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Feb 21, 2024

    Critical OS Command Injection Vulnerability in Progress Kemp LoadMaster

    A serious OS command injection vulnerability has been discovered in Progress Kemp LoadMaster, potentially allowing unauthorized remote access to the system.

    What changed

    A significant vulnerability has been identified in the Progress Kemp LoadMaster, specifically an OS command injection flaw. This issue permits unauthenticated, remote attackers to execute arbitrary commands on the system via the LoadMaster management interface.

    Who is affected

    The vulnerability impacts various users and organizations utilizing Progress Kemp LoadMaster. It poses a substantial risk to those who rely on this product for load balancing and application delivery.

    Affected parties should be aware of the potential for unauthorized access and command execution.

    • Organizations using Progress Kemp LoadMaster for application delivery.
    • IT departments managing network infrastructure relying on LoadMaster.
    • Service providers offering load balancing solutions based on LoadMaster technology.

    What to do

    It is crucial for affected users to assess their systems for exposure to this vulnerability. Immediate action should be taken to secure the LoadMaster management interface and prevent unauthorized access.

    Regular updates and patches from the vendor should be monitored and applied promptly.

    • Review and update security configurations for LoadMaster.
    • Implement access controls to restrict management interface access.
    • Stay informed about vendor updates and security advisories.

  2. Research · Feb 21, 2024

    Critical Authentication Bypass Vulnerability in ConnectWise ScreenConnect

    A significant authentication bypass vulnerability has been identified in ConnectWise ScreenConnect, potentially exposing sensitive data and systems to unauthorized access.

    What changed

    ConnectWise has disclosed a serious authentication bypass vulnerability affecting its ScreenConnect product. This flaw allows attackers to exploit an alternate path or channel to gain unauthorized access to sensitive information and critical systems.

    The vulnerability affects all versions of ConnectWise ScreenConnect prior to 23.9.7, highlighting the importance of timely updates and patches.

    Who is affected

    Organizations using ConnectWise ScreenConnect are at risk due to this vulnerability. The following groups are particularly vulnerable:

    IT service providers and managed service providers relying on ScreenConnect for remote access and support.

    • ConnectWise ScreenConnect users prior to version 23.9.7
    • IT service providers utilizing ConnectWise for remote support
    • Organizations managing sensitive data through ScreenConnect
    • Any enterprise relying on ConnectWise for remote access solutions

    What to do

    It is crucial for affected organizations to take immediate action to mitigate risks associated with this vulnerability. Updating to the latest version of ConnectWise ScreenConnect is strongly recommended.

    Additionally, organizations should review their security protocols and ensure that access controls are in place to protect sensitive information.

    • Upgrade to ConnectWise ScreenConnect version 23.9.7 or later
    • Conduct a security audit of current access controls
    • Implement additional monitoring for unusual access patterns
    • Educate staff about the risks associated with remote access vulnerabilities