H/W - CyberSophia

Credentials for 87000 FortiGate VPN Devices Were Leaked

Fortinet announced that the credentials for 87000 FortiGate VPN devices were leaked by a malicious actor.

Critical Security Flaws on D-Link DIR-3040 Routers

Critical security flaws have been discovered on D-Link DIR-3040 routers.

Critical Cisco Router Vulnerabilities (CVE-2021-1609 and CVE-2021-1610)

Multiple vulnerabilities (CVE-2021-1609 and CVE 2021-1610) have been discovered on Cisco Small Business Routers (RV340, RV340W, RV345, and RV345P) that could allow an attacker to remotely execute arbitrary code, execute arbitrary root level commands and cause denial of service (DoS).

High Severity Security Vulnerability in HP, Samsung and Xerox Printers (CVE-2021-3438)

A 16-year-old, high severity security vulnerability (CVE-2021-3438) was discovered by SentinelLABS in HP, Samsung and Xerox printers.

Secret Backdoor Discovered on Zyxel Firewall and AP Controllers (CVE-2020-29583)

Secret backdoor discovered on Zyxel Firewall and AP controllers that could allow attackers to gain administrative management rights on the devices running the vulnerable firmware.

Zero-Day Command Injection Vulnerabilities on D-Link Routers

Multiple zero-day command injection vulnerabilities have been discovered on D-Link Routers.

Plundervolt Attack (CVE-2019-11157)

Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access.