Security Affairs

NOVEMBER 29, 2020

out of 10 in severity by the industry-standard Common Vulnerability Scoring System (CVSS) and impacts all versions of EtherNet/IP Adapter Source Code Stack prior to 2.28, which was released on November 21, 2012. Also recognize that VPN is only as secure as the connected devices. Tracked as CVE-2020-25159 , the flaw is rated 9.8

Hacking 126

Hacking Firmware Internet Internet 126

Krebs on Security

JUNE 25, 2021

The My Book Live and My Book Live Duo devices received its final firmware update in 2015. The NVD’s advisory credits VPN reviewer Wizcase.com with reporting the bug to Western Digital three years ago, back in June 2018. We understand that our customers’ data is very important.

Internet 303

Internet Internet Backups Small Business 303

Security Affairs

OCTOBER 20, 2018

CVE-2018-18472 – XXE and Unauthenticated Remote Command Execution in Axentra Hipserv NAS firmware. . It’s used in different devices from different vendors, the affected devices sharing the firmware are: Netgear Stora. The company provides a firmware with a web interface that mainly uses PHP as a serverside language.

Firmware 61

Firmware IoT VPN Authentication 61

SecureList

NOVEMBER 14, 2022

Okta was breached through one of its service providers, Sitel, itself compromised via the insecure VPN gateway of a recently acquired company. In both cases, we described new UEFI firmware bootkits that managed to propagate malicious components from the deepest layers of the machine up to Windows’ user-land.

Firmware 105

Firmware Surveillance Mobile Telecommunications 105