ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

  1. Oct 25, 2023

    Critical Out-of-Bounds Write Vulnerability Discovered in VMware vCenter Server

    A newly identified out-of-bounds write vulnerability in VMware vCenter Server could allow remote code execution, posing significant risks to network security.

    What changed

    VMware has reported a serious out-of-bounds write vulnerability affecting its vCenter Server. This flaw is rooted in the implementation of the DCERPC protocol, which can be exploited by malicious actors.

    The vulnerability allows attackers with network access to potentially execute arbitrary code on the affected system, highlighting the need for immediate attention.

    Who is affected

    The vulnerability impacts various users and organizations utilizing VMware's vCenter Server, especially those managing virtualized environments.

    Key affected groups include:

    • Organizations using VMware vCenter Server for virtualization management.
    • IT departments that rely on vCenter Server for infrastructure management.
    • Businesses in sectors such as finance, healthcare, and education that utilize VMware products.

    What to do

    It is crucial for affected organizations to assess their systems for this vulnerability and apply necessary patches or updates provided by VMware.

    Implementing network segmentation and monitoring can help mitigate risks associated with potential exploitation.

    • Review VMware's security advisories for updates on this vulnerability.
    • Ensure that all instances of vCenter Server are updated to the latest version.
    • Consider conducting a security audit to identify any other potential vulnerabilities.

  2. Oct 16, 2023

    Cisco IOS XE Web UI Privilege Escalation Vulnerability Exposed

    Cisco has identified a privilege escalation vulnerability in the IOS XE Web UI, allowing attackers to exploit previously unknown issues for unauthorized access.

    What changed

    Cisco has reported a critical vulnerability within the IOS XE Web UI that has been actively exploited by attackers. This vulnerability allows unauthorized users to escalate their privileges, potentially gaining root access.

    The investigation revealed that two previously unknown issues were exploited, starting with CVE-2023-20198, which enabled attackers to create local user accounts and subsequently elevate their privileges.

    Who is affected

    Several Cisco products utilizing the IOS XE Web UI are at risk, particularly those deployed in enterprise environments. Users of these systems should be vigilant.

    Organizations relying on Cisco routers and switches that incorporate this software could face significant security risks if unpatched.

    • Cisco IOS XE Software users
    • Enterprise organizations utilizing Cisco networking equipment
    • Network administrators managing Cisco devices

    What to do

    It is crucial for affected organizations to apply the latest security updates provided by Cisco. Regularly monitoring for vulnerability disclosures and implementing security best practices can mitigate risks.

    Utilizing the Software Checker tool provided by Cisco can help in identifying vulnerable versions of the software in use.

    • Update Cisco IOS XE Software to the latest fixed releases.
    • Use the Software Checker to assess your current software version.
    • Implement strict access controls and monitor user activities on the web UI.