Vulnerabilitycritical
Critical Patches Released for New Flaws in Cisco, Fortinet, VMware Products
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-34992 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized… | 9.8 | 80% | ||
| CVE-2023-36553 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and… | 9.8 | 2% | ||
CVE-2024-20252+2 related CVEs | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to… | 8.8 group max | <1% | ||
CVE-2024-22237+4 related CVEs | Aria Operations for Networks contains a local privilege escalation vulnerability | 7.8 group max | <1% | ||
CVE-2024-23108+1 related CVE | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized… | 9.8 | 78% |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Feb 08, 2024 Cyber Threat / Network Security Cisco, Fortinet, and VMware have released security fixes for multiple security vulnerabilities, including critical weaknesses that could be exploited to perform arbitrary actions on affected devices. The first set from Cisco consists of three flaws – CVE-2024-20252 and CVE-2024-20254 (CVSS score: 9. 6) and CVE-2024-20255 (CVSS score: 8.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.