SIGRed vulnerability

SIGRed Vulnerability A vulnerability named SIGRed and numbered CVE-2020-1350 was discovered in 2020 May by the Checkpoint Security Research Team. RISKS Remote code execution Server compromission Data exfiltration AFFECTED SYSTEMS The following server versions are affected (when the DNS service is activated): Windows Server 2008 for 32-bit Systems Service Pack Read more…

EUROPEAN NETWORK SENSORS

EUROPEAN NETWORK SENSORS When reviewing logs from a company, TEHTRIS CERT found multiple instances where an IP address had been trying to contact sensitive servers. Since these servers were unknown to open source databases, an investigation was conducted to understand how a potential attacker could identify the IP addresses of Read more…

UPnP CallStranger vulnerability

UPnP CallStranger vulnerability RISKS Remote code execution Data exfiltration Involuntary participation in a DDOS attack AFFECTED SYSTEMS List being updated whose vulnerability is confirmed: Windows 10 – upnphost.dll 10.0.18362.719 Xbox One- OS Version 10.0.19041.2494 ADB TNR-5720SX Box (TNR-5720SX/v16.4-rc-371-gf5e2289 UPnP/1.0 BH-upnpdev/2.0) Asus ASUS Media Streamer Asus Rt-N11 Belkin WeMo Broadcom ADSL Read more…