ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

  1. Oct 25, 2023

    Critical Out-of-Bounds Write Vulnerability Discovered in VMware vCenter Server

    A newly identified out-of-bounds write vulnerability in VMware vCenter Server could allow remote code execution, posing significant risks to network security.

    What changed

    VMware has reported a serious out-of-bounds write vulnerability affecting its vCenter Server. This flaw is rooted in the implementation of the DCERPC protocol, which can be exploited by malicious actors.

    The vulnerability allows attackers with network access to potentially execute arbitrary code on the affected system, highlighting the need for immediate attention.

    Who is affected

    The vulnerability impacts various users and organizations utilizing VMware's vCenter Server, especially those managing virtualized environments.

    Key affected groups include:

    • Organizations using VMware vCenter Server for virtualization management.
    • IT departments that rely on vCenter Server for infrastructure management.
    • Businesses in sectors such as finance, healthcare, and education that utilize VMware products.

    What to do

    It is crucial for affected organizations to assess their systems for this vulnerability and apply necessary patches or updates provided by VMware.

    Implementing network segmentation and monitoring can help mitigate risks associated with potential exploitation.

    • Review VMware's security advisories for updates on this vulnerability.
    • Ensure that all instances of vCenter Server are updated to the latest version.
    • Consider conducting a security audit to identify any other potential vulnerabilities.

  2. Oct 18, 2023

    Critical XXE Vulnerability Discovered in North Grid Proself Products

    A serious XML External Entity (XXE) vulnerability has been identified in multiple versions of North Grid's Proself products, potentially exposing sensitive data to remote attackers.

    What changed

    North Grid has reported a significant security flaw in its Proself product line, specifically an Improper Restriction of XML External Entity (XXE) Reference Vulnerability. This vulnerability allows remote unauthenticated attackers to exploit the system by sending specially crafted XML requests.

    • The vulnerability could lead to unauthorized access to sensitive files on the server.
    • Attackers can potentially read account information stored in arbitrary files.
    • This issue affects multiple editions of Proself, increasing the risk of exploitation.

    Who is affected

    The vulnerability impacts various editions of North Grid's Proself products, making a wide range of users susceptible to potential attacks.

    • Proself Enterprise/Standard Edition versions 5.62 and earlier.
    • Proself Gateway Edition versions 1.65 and earlier.
    • Proself Mail Sanitize Edition versions 1.08 and earlier.
    • Organizations using these products for data management and communication are at risk.

    What to do

    Organizations utilizing affected versions of North Grid Proself should take immediate action to mitigate the risk associated with this vulnerability.

    • Upgrade to the latest versions of Proself products as soon as possible.
    • Review and monitor server configurations to limit exposure to XML External Entity attacks.
    • Implement security best practices to safeguard sensitive data against unauthorized access.