Overview Recently, NSFOCUS CERT detected a remote code execution vulnerability in VMware Aria Operations for Networks. Due to a specific flaw in the createSupportBundle method, the string entered by the user is not properly validated when executing system calls. Unauthenticated remote attackers can exploit this vulnerability through command injection, ultimately...
Year: 2023
Digital Transformation – New Era for Macau 2023
V-Transform Expo, June 16, 2023, Macau Tower Convention and Entertainment center, Macau NSFOCUS, a leading provider of network security solutions and services, exhibited at V-Transform Expo 2023 in Macau as Silver Sponsor, organized by Vastcom Technology Limited. Our team joined a day of insightful sessions on cybersecurity, artificial intelligence, digital transformation, machine learning, cloud computing...etc....
An Insight into RSAC 2023: Convergence of Threat Intelligence and AI
I. Overview In cybersecurity, big data is transforming threat intelligence and artificial intelligence, providing security teams with the flexibility to respond to changing environments. At the 2023 RSAC, Microsoft Vice President John Lambert discussed the convergence of intelligence and AI at the intersection of data and threats. The topic focused...
Openfire Console Identity Authentication Bypass Vulnerability (CVS 2023-32315) Notification
Overview Recently, NSFOCUS CERT detected an identity authentication bypass vulnerability in the Openfire console (CVE-2023-32315). The Admin Console of Openfire is a web-based application that has been found to be vulnerable to path traversal attacks by setting up the environment. Unauthenticated attackers use the unauthenticated Openfire setting environment in a...
An Insight into RSAC 2023: Web Application and API Security Trend
At this year's RSA conference, Akamai Senior Vice President Rupesh Chokshi shared a topic entitled Spotlight on latest web application and API attack data, highlighting the latest web application vulnerabilities and API attack trends. This article will explore this topic, starting from the data trends of application vulnerabilities and API...
Fortinet FortiOS SSL VPN Remote Code Execution Vulnerability (CVS 2023-27997)
Overview Recently, NSFOCUS CERT found that Fortinet has officially fixed a remote code execution vulnerability in FortiOS SSL VPN (CVS-2023-27997). Due to the heap-based Buffer overflow error in SSL VPN, an unauthenticated attacker can trigger the vulnerability by sending a specially crafted packet, which can ultimately enable the execution of...
