Cisco alert: Flaw impacts Smart Software Manager for on-premises use.

TLDR:

Cisco has released patches for a critical flaw in Smart Software Manager On-Prem that could allow attackers to change user passwords.
Another critical file write vulnerability in Secure Email Gateway has also been fixed, allowing attackers to add new users with root privileges.

Article Summary:

Cisco has issued patches for a critical vulnerability affecting Smart Software Manager On-Prem (Cisco SSM On-Prem) that could be exploited by remote, unauthenticated attackers to change user passwords, including administrative users. The flaw, tracked as CVE-2024-20419 and with a CVSS score of 10.0, was discovered and reported by security researcher Mohammed Adel. This vulnerability is a result of improper implementation of the password-change process, allowing attackers to access the web UI or API with compromised user privileges.

Additionally, Cisco has addressed another critical file write vulnerability in Secure Email Gateway (CVE-2024-20401) that could enable attackers to add new users with root privileges and cause permanent denial-of-service conditions on affected devices. The flaw affects SEG devices running vulnerable releases of Cisco AsyncOS, although a patch is available via Content Scanner Tools package versions 23.3.0.4823 and later.

Furthermore, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including CVE-2024-34102, a severe flaw that allows remote code execution by mishandling nested deserialization. Other vulnerabilities added to the catalog include Adobe Commerce and Magento Open Source XXE Vulnerability, SolarWinds Serv-U Path Traversal Vulnerability, and VMware vCenter Server Default File Permissions Vulnerability. Federal agencies are required to apply mitigations per vendor instructions by August 7, 2024, to protect their networks against active threats.

This series of vulnerabilities underscores the importance of timely patching and proactive cybersecurity measures to prevent exploitation by malicious actors.

Post Views: 78

Latest from Blog

SDCOE praised for leadership, support, and innovation in cybersecurity

TLDR: San Diego County Grand Jury commends SDCOE for leadership in cybersecurity in K-12 education SDCOE provides resources, guidance, and cybersecurity solutions to county school districts A recent report by the San

EU’s tough cyber rules threaten massive fines and business suspensions

TLDR: The EU’s NIS 2 becomes enforceable on Oct. 17, imposing tougher cyber regulations on companies. Companies could face hefty fines or service suspensions for violations under the new law. Companies in

Financial sector prime target for DDoS attacks, Akamai study finds

TLDR: – Financial services sector remains the top target for DDoS attacks for the second consecutive year – APJ region faces significant cybersecurity challenges with a high threat score for phishing A

Watch out for serverless architecture’s cybersecurity risks for businesses

Serverless Architecture and Cybersecurity Risks TLDR: Move towards serverless architecture presents new security challenges Threat actors are exploring vulnerabilities in serverless environments Today’s cybersecurity landscape is rapidly evolving with the adoption of

Ivanti alerts on exploited CSA vulnerability in recent cyber attacks

Article Summary TLDR: Ivanti warns of critical Cloud Services Appliance (CSA) flaw being exploited in attacks Threat actors are exploiting CVE-2024-8963 admin bypass vulnerability to access restricted functionality Ivanti Warns of Another

Beware Vanilla Tempest hackers target healthcare sectors, Microsoft alerts

TLDR: Vanilla Tempest, a ransomware group, is targeting healthcare organizations in the US using a new ransomware strain called “INC.” The attackers use tools like Supper backdoor, AnyDesk, and MEGA to further

Internet baffled by mysterious ‘Noise Storms’ stumping experts

TLDR: Internet intelligence firm GreyNoise has been tracking large waves of “Noise Storms” containing spoofed internet traffic since January 2020 The purpose and origin of these noise storms, suspected to be covert

Top 20 Linux Admin Tools for 2024

TLDR: Top Linux Admin Tools in 2024 Key points: Linux admin tools streamline system configurations, performance monitoring, and security management. Popular Linux admin tools include Webmin, Puppet, Zabbix, Nagios, and Ansible. Summary

Evergy chooses OneLayer Bridge for private LTE network management and security

TLDR: Evergy has selected OneLayer Bridge for private LTE network management and security in a multi-year deal. The platform will help manage and secure thousands of devices on Evergy’s private LTE network,

Bogus job tempts aerospace, energy workers

TLDR: A North Korean cyberespionage group is posing as job recruiters to target employees in aerospace and energy sectors. Mandiant reports that the group uses fake job descriptions stored in malicious archives

Suggestions

Cisco alert: Flaw impacts Smart Software Manager for on-premises use

TLDR:

Article Summary:

Latest from Blog