Radware’s Firewall Fiasco: Vulnerabilities Fixed in 2023, But Communication Lags Behind
Radware has squashed vulnerabilities in its Cloud Web Application Firewall, but not before a game of “who’s on first?” ensued. CERT/CC revealed the issues, Radware clarified they’d already fixed them in 2023, and amidst the confusion, the reporter’s findings initially went unacknowledged. Cybersecurity: where clarity’s a feature, not a bug.
Hot Take:
Radware: The ghostbusters of vulnerabilities! They addressed those pesky little bugs even before we knew they were haunting our systems. Who you gonna call? Radware!
Key Points:
- Radware’s Cloud WAF had vulnerabilities disclosed by CERT/CC on May 7, 2024.
- The vulnerabilities, CVE-2024-56523 and CVE-2024-56524, were bypass methods for the firewall.
- Radware claims they addressed these vulnerabilities in 2023, much like a cybersecurity time traveler.
- Researcher Oriol Gegundez reported the vulnerabilities, but Radware was initially mum about it.
- Radware assures customers that solutions were implemented, with a signature applied globally.
Already a member? Log in here