CISA’s Bug Parade: New Vulnerabilities Added to Watchlist!
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities in ProjectSend, North Grid Proself, and Zyxel Firewalls to its Known Exploited Vulnerabilities catalog. These issues include improper authentication and path traversal flaws, highlighting the importance of applying security patches before attackers do their own ‘creative’ file management.
Hot Take:
Looks like CISA just added some new flavors to their vulnerability ice cream catalog, featuring the delightful trio of ProjectSend, North Grid Proself, and Zyxel Firewalls. These bugs are now the cybersecurity world’s equivalent of a triple scoop of trouble, and trust me, this is one sundae you don’t want to indulge in!
Key Points:
- CISA adds three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.
- North Grid Proself vulnerability allows attackers to read server files via XXE attacks.
- ProjectSend’s improper authentication flaw scores a whopping 9.8 on the CVSS scale.
- Zyxel Firewalls are susceptible to a path traversal vulnerability.
- Federal agencies must patch these vulnerabilities by December 24, 2024.
Already a member? Log in here