ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

  1. Oct 18, 2023

    Critical XXE Vulnerability Discovered in North Grid Proself Products

    A serious XML External Entity (XXE) vulnerability has been identified in multiple versions of North Grid's Proself products, potentially exposing sensitive data to remote attackers.

    What changed

    North Grid has reported a significant security flaw in its Proself product line, specifically an Improper Restriction of XML External Entity (XXE) Reference Vulnerability. This vulnerability allows remote unauthenticated attackers to exploit the system by sending specially crafted XML requests.

    • The vulnerability could lead to unauthorized access to sensitive files on the server.
    • Attackers can potentially read account information stored in arbitrary files.
    • This issue affects multiple editions of Proself, increasing the risk of exploitation.

    Who is affected

    The vulnerability impacts various editions of North Grid's Proself products, making a wide range of users susceptible to potential attacks.

    • Proself Enterprise/Standard Edition versions 5.62 and earlier.
    • Proself Gateway Edition versions 1.65 and earlier.
    • Proself Mail Sanitize Edition versions 1.08 and earlier.
    • Organizations using these products for data management and communication are at risk.

    What to do

    Organizations utilizing affected versions of North Grid Proself should take immediate action to mitigate the risk associated with this vulnerability.

    • Upgrade to the latest versions of Proself products as soon as possible.
    • Review and monitor server configurations to limit exposure to XML External Entity attacks.
    • Implement security best practices to safeguard sensitive data against unauthorized access.

  2. Oct 16, 2023

    Cisco IOS XE Web UI Privilege Escalation Vulnerability Exposed

    Cisco has identified a privilege escalation vulnerability in the IOS XE Web UI, allowing attackers to exploit previously unknown issues for unauthorized access.

    What changed

    Cisco has reported a critical vulnerability within the IOS XE Web UI that has been actively exploited by attackers. This vulnerability allows unauthorized users to escalate their privileges, potentially gaining root access.

    The investigation revealed that two previously unknown issues were exploited, starting with CVE-2023-20198, which enabled attackers to create local user accounts and subsequently elevate their privileges.

    Who is affected

    Several Cisco products utilizing the IOS XE Web UI are at risk, particularly those deployed in enterprise environments. Users of these systems should be vigilant.

    Organizations relying on Cisco routers and switches that incorporate this software could face significant security risks if unpatched.

    • Cisco IOS XE Software users
    • Enterprise organizations utilizing Cisco networking equipment
    • Network administrators managing Cisco devices

    What to do

    It is crucial for affected organizations to apply the latest security updates provided by Cisco. Regularly monitoring for vulnerability disclosures and implementing security best practices can mitigate risks.

    Utilizing the Software Checker tool provided by Cisco can help in identifying vulnerable versions of the software in use.

    • Update Cisco IOS XE Software to the latest fixed releases.
    • Use the Software Checker to assess your current software version.
    • Implement strict access controls and monitor user activities on the web UI.