CISA Sounds the Alarm on Array Networks Flaw: Patch or Perish!
CISA adds Array Networks AG and vxAG ArrayOS flaw to its Known Exploited Vulnerabilities catalog. This flaw, with a CVSS score of 9.8, allows hackers to rummage through the SSL VPN gateway like it’s their personal junk drawer. Federal agencies must fix this by December 16, 2024.
Hot Take:
Looks like Array Networks is now the latest VIP guest at CISA’s exclusive “Oops, We Exploited That!” bash. With a CVSS score that’s higher than my last credit card bill, it’s time for federal agencies to play cybersecurity whack-a-mole before hackers crash the party!
Key Points:
- Array Networks AG and vxAG ArrayOS flaw added to CISA’s Known Exploited Vulnerabilities (KEV) catalog.
- Flaw allows remote code execution, impacting versions 9.4.0.481 and earlier.
- Attackers can exploit the SSL VPN gateway via an HTTP header without authentication.
- CISA mandates federal agencies to patch the vulnerability by December 16, 2024.
- Private organizations are advised to address these vulnerabilities too.
Already a member? Log in here