Vulnerabilitycritical
Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-31706+1 related CVE | The vRealize Log Insight contains a Directory Traversal Vulnerability | 9.8 | 87% | ||
CVE-2023-20036+1 related CVE | A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the… | 9.9 group max | 13% | ||
| CVE-2023-20154 | A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface… | 8.1 | <1% | ||
CVE-2023-20864+1 related CVE | VMware Aria Operations for Logs contains a deserialization vulnerability | 9.8 group max | 70% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Apr 21, 2023 Software Update / Network Security Cisco and VMware have released security updates to address critical security flaws in their products that could be exploited by malicious actors to execute arbitrary code on affected systems. The most severe of the vulnerabilities is a command injection flaw in Cisco Industrial Network Director (CVE-2023-20036, CVSS score: 9.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.