Ransomwarecritical
SonicWall Probes Attack Using Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-13379 | Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-19781 | Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2020-15505 | Unauthenticated Hessian Java Deserialization RCE in Ivanti MobileIron | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2020-1631 | Unauthenticated Path Traversal/LFI in Juniper Junos OS HTTP/HTTPS Service | 9.8 | 5% | KEV | KEV |
| CVE-2020-2021 | SAML Authentication Bypass in Palo Alto Networks PAN-OS | 10.0 | 4% | KEVRansomware | KEV |
From the original article
2 min read at infosecurity-magazine.com
Security vendor SonicWall has warned its customers that threat actors may have found zero-day vulnerabilities in some of its remote access products. An initial post on the vendor’s knowledgebase pages on Friday claimed that the NetExtender VPN client version 10. x and the SMB-focused SMA 100 series were at risk.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.