article thumbnail

Cisco addressed CVE-2019-1663 RCE flaw in wireless routers

Security Affairs

Cisco addressed CVE-2019-1663 critical flaw in several wireless routers that could be exploited by attackers to remotely execute code on the impacted devices. The CVE-2019-1663 flaw received a CVSS score of 9.8, The tech giant fixed the issue in the following releases: RV110W Wireless-N VPN Firewall: 1.2.2.1

article thumbnail

Sophos fixed a critical vulnerability in Cyberoam firewalls

Security Affairs

A vulnerability in Sophos Cyberoam firewalls could be exploited by an attacker to gain access to a target’s internal network without authentication. Sophos addressed a vulnerability in its Cyberoam firewalls that could be exploited by an attacker to gain access to a company’s internal network without providing a password.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Chinese police arrested the operator of unauthorized VPN service that made $1.6 million from his activity

Security Affairs

Chinese authorities continue operations against unauthorized VPN services that are very popular in the country. China continues to intensify the monitoring of the cyberspace applying and persecution of VPN services that could be used to bypass its censorship system known as the Great Firewall. Pierluigi Paganini.

VPN 65
article thumbnail

Cisco Fixes Critical Flaw in Wireless VPN, Firewall Routers

Threatpost

Cisco said that CVE-2019-1663, which has a CVSS score of 9.8, allows unauthenticated, remote attackers to execute arbitrary code.

article thumbnail

Do Not Confuse Next Generation Firewall And Web Application Firewall

SiteLock

Let us start with the abbreviations that define the categories of information security products: WAF stands for Web Application Firewall , NGFW stands for Next Generation Firewall. NGFW (or Next Generation Firewall) is an evolution of traditional firewalls and serves to delimit access between network segments.

article thumbnail

Trending CVEs for the Week of March 4th, 2019

NopSec

Updates on Drupal (CVE-2019-6340) & A New Improper Input Validation Flaw Leading to RCE in Cisco Routers (CVE-2019-1663) The improper input validation flaw leading to remote code execution (RCE) in Drupal (CVE-2019-6340), which we covered in detail last week, is still trending this week.

article thumbnail

Hackers are scanning the web for vulnerable Fortinet, Pulse Secure Products installs

Security Affairs

Hackers are exploiting recently disclosed flaws in enterprise virtual private network (VPN) products from Fortinet and Pulse Secure. The popular cybersecurity expert Kevin Beaumont has observed threat actors attempting to exploit the CVE-2018-13379 in the FortiOS SSL VPN web portal and CVE-2019-11510 flaw in Pulse Connect Secure.

VPN 108