Platform
Managed Security Services
Managed Penetration Testing
Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.
Resources
March 15, 2023Severity High Analysis Summary According to researchers, a Golang-based botnet named GoBruteforcer has been discovered, which is specifically targeting web servers running FTP, MySQL, phpMyAdmin, and […]March 15, 2023Severity High Analysis Summary DarkComet RAT (Remote Administration Tool) is a type of malware that is designed to allow attackers to gain remote access to a […]March 15, 2023Severity High Analysis Summary CVE-2023-23410 CVSS:7.8 Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in […]Threat Insights
Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.
Connect with Us
Platform
Managed Security Services
Managed Penetration Testing
Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.
Resources
March 15, 2023Severity High Analysis Summary According to researchers, a Golang-based botnet named GoBruteforcer has been discovered, which is specifically targeting web servers running FTP, MySQL, phpMyAdmin, and […]March 15, 2023Severity High Analysis Summary DarkComet RAT (Remote Administration Tool) is a type of malware that is designed to allow attackers to gain remote access to a […]March 15, 2023Severity High Analysis Summary CVE-2023-23410 CVSS:7.8 Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in […]Threat Insights
Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.
Connect with Us
Rewterz Threat Alert- Flawed Ammyy RAT (aka FlawedAmmyy RAT) Malware – Threat Indicators
March 7, 2019Rewterz Threat Advisory – Cisco Nexus 5600 / 6000 Series Switches NX-OS FCoE Denial of Service Vulnerability
March 7, 2019
Severity
High
Analysis Summary
The vulnerability exists due to improper neutralization of input during web page generation process. The web application browser interprets input as active HTML, JavaScript, or VBScript, which could allow an attacker to execute arbitrary code.
Affected Vendors
PSI GridConnect GmbH
Affected Products
Telecontrol Gateway and Smart Telecontrol Unit family
IEC104 Security Proxy
Telecontrol Gateway 3G Versions 4.2.21
5.0.27
5.1.19
6.0.16 and prior;
Telecontrol Gateway XS-MU Versions 4.2.21
Telecontrol Gateway VM Versions 4.2.21
Smart Telecontrol Unit TCG Versions 5.0.27
6.0.16 and prior; and
IEC104 Security Proxy Version 2.2.10 and prior.
Remediation
A fix for the vulnerability is available in the following software releases:
- 5.1.20,
- 6.0.17, and
- IEC104 Security Proxy Version 2.2.11
The following software releases are no longer supported:
- 4.2.x, and
- 5.0.x
PSI recommends deactivating the webserver via CLI since the web interface is not essential to the configuration of the device.