ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Dec 25, 2023

    Critical Use-After-Free Vulnerability Discovered in Linux Kernel's Netfilter Component

    A significant use-after-free vulnerability in the Linux kernel's netfilter component has been identified, enabling potential local privilege escalation for attackers.

    What changed

    A critical use-after-free vulnerability has been discovered within the Linux kernel's netfilter: nf_tables component. This flaw can be exploited to achieve local privilege escalation, posing a serious risk to system integrity.

    The issue arises from the function nft_pipapo_walk, which fails to skip inactive elements during set walk, resulting in double deactivations of PIPAPO elements and leading to the vulnerability.

    Who is affected

    This vulnerability primarily impacts users of the Linux kernel, particularly those utilizing the netfilter component for packet filtering.

    Organizations relying on Linux-based systems for their operations, especially in enterprise environments, should be aware of this risk.

    • Linux kernel users across various distributions.
    • Organizations utilizing Linux for server and cloud infrastructure.
    • Developers working with applications that depend on the Linux kernel's netfilter component.
    • Security teams managing Linux-based systems in enterprise environments.

    What to do

    To mitigate the risk associated with this vulnerability, users are strongly advised to upgrade their systems beyond commit 317eb9685095678f2c9f5a8189de698c5354316a.

    Regularly applying security patches and updates is crucial to maintaining system security and integrity.

  2. Research · Dec 5, 2023

    Critical Insecure Default Password Vulnerability in Unitronics Vision PLC and HMI

    A significant vulnerability has been identified in Unitronics Vision PLC and HMI systems, allowing unauthorized access due to insecure default passwords.

    What changed

    Unitronics Vision PLC and HMI systems have been found to have a serious security flaw related to the use of an insecure default administrative password. This vulnerability affects versions of VisiLogic prior to 9.9.00.

    An unauthenticated attacker with network access can exploit this weakness to gain administrative control over the affected systems, posing a significant risk to operational integrity.

    Who is affected

    The vulnerability impacts a range of products and systems, particularly those utilizing the Vision and Samba PLCs and HMIs.

    Organizations using Unitronics Vision PLCs and HMIs should be aware that their systems may be at risk if they have not updated to the latest firmware.

    • Unitronics Vision PLCs
    • Unitronics Samba PLCs
    • Unitronics HMIs
    • Users of VisiLogic software versions before 9.9.00

    What to do

    It is crucial for users of affected systems to take immediate action to mitigate the risks associated with this vulnerability. Updating to the latest version of VisiLogic is highly recommended.

    Additionally, users should review their security policies to ensure that default passwords are changed and that robust password management practices are implemented.

    • Upgrade VisiLogic to version 9.9.00 or later.
    • Change default passwords on all devices.
    • Implement network security measures to restrict unauthorized access.
    • Regularly audit and update security protocols.