SANTA CLARA, Calif., September 18, 2018 – NSFOCUS, the leader in holistic hybrid security solutions, today announced the launch of NSFOCUS Exposed Internet Surface Analysis (EISA), a new capability to address the ever-expanding cyber security risk faced by organizations today. EISA identifies malicious activity of rogue IPs, ports and services...
Blog
Multiple Vulnerabilities in Cisco Products
Cisco has released 30 security advisories on 5 September 2018 to address vulnerabilities affecting multiple products. Three of them are critical. Reference link: https://tools.cisco.com/security/center/publicationListing.x?product=Cisco&sort=-day_sir#~Vulnerabilities Vulnerability Description CVE-2018-11776 – Apache Struts Remote Code Execution Vulnerability Affecting Cisco Products (Critical) A vulnerability in Apache Struts could allow an unauthenticated, remote attacker to execute arbitrary...
Technical Analysis and Solution | Apache Struts 2 Remote Code Execution Vulnerability (S2-057)
On August 22, 2018, Beijing time, Apache Software Foundation (ASF) released a security bulletin, announcing a remote code execution vulnerability (CVE-2018-11776, CNVD-2018-15894, or CNNVD-201808-740) in Apache Struts 2. This vulnerability exists in either of the following cases: The namespace value is not set for a result defined in underlying XML...
Apache Struts 2 Remote Code Execution Vulnerability
Tag: Apache Struts2, CVE-2018-11776, Remote Code Execution, S2-057 Severity：Critical This vulnerability can lead to remote code execution. PoC has been made publicly available and may lead to significant, extensive impact. Description On August 22, Apache disclosed a remote code execution (RCE) vulnerability that has been asigned the CVE number CVE-2018-11776....
Multiple Vulnerabilities Found in Emerson DeltaV DSC Workstatios
Emerson DeltaV DCS Workstations fixed several vulnerabilities recently, including path traversal, privilege escalation, stack-based buffer overflow, etc. The highest CVSS 3.0 base score is 9.6. Emerson has released patches to address these problems. For detailed information, please visit: https://ics-cert.us-cert.gov/advisories/ICSA-18-228-01 Description CVE-2018-14797 CVSS v3: 8.2 A specially crafted DLL file may...
WECON LeviStudioU Stack-based and Heap-based Buffer Overflow Vulnerabilities
According to a report with NCCIC on August 13, two vulnerabilities were found in WECON LeviStudioU. They are stack-based buffer overflow vulnerability (CVE-2018-10602) and heap-based buffer overflow vulnerability (CVE-2018-10606). NSFOCUS security team and Ghirmay Desta worked with Mat Powell of Trend Micro’s Zero Day Initiative to report these vulnerabilities to...
