March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Cerberus Banking Trojan – Active IOCs
August 24, 2021
Rewterz Threat Advisory – ICS – Delta Electronics TPEditor Vulnerability
August 25, 2021
Rewterz Threat Alert – Cerberus Banking Trojan – Active IOCs
August 24, 2021
Rewterz Threat Advisory – ICS – Delta Electronics TPEditor Vulnerability
August 25, 2021
Severity
High
Analysis Summary
CVE-2021-33191
Apache NiFi MiNiFi C++ could allow a remote attacker to execute arbitrary commands on the system, caused by improper input validation by the agent-update command. By sending a specially-crafted c2-update command with a modified value, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the application binary.
Impact
- Unauthorized Access
Affected Vendors
Apache
Affected Products
- Apache NiFi MiNiFi C++ 0.5.0
Remediation
Upgrade to the latest version of Apache, available from the Apache Web site.