CERT-In alarms users about vulnerability in cybersecurity company F5 product

TLDR:

• The Indian Computer Emergency Response Team (CERT-In) has warned users of a vulnerability in F5’s BIG-IP, which could allow a remote attacker to execute craft DNS queries or cause a Denial of Service (DoS) condition.
• CERT-In has also warned users of multiple vulnerabilities in Android and Mozilla Firefox web browsers

The Indian Computer Emergency Response Team (CERT-In) has issued a warning to users about a vulnerability in cybersecurity firm F5’s product, BIG-IP. They highlighted that this vulnerability could be exploited by a remote attacker by flooding the target server with queries, leading to excessive CPU load on the targeted system. The cyber agency advised users to apply appropriate updates to mitigate the risk of exploitation. Additionally, CERT-In also raised concerns about vulnerabilities in Android and Mozilla Firefox web browsers, which could allow attackers to obtain sensitive information, execute arbitrary code, and cause Denial-of-Service conditions on the targeted system. The affected software versions include ‘Android 12, 12L, 13, 14’, and ‘Mozilla Firefox versions prior to 124.0.1 and Mozilla Firefox ESR versions before 115.9.1’.