cisa.gov | Bulletins
Follow
Vulnerability Summary for the Week of February 3, 2025
Multiple high-vulnerability issues have been identified in various products, including .TUBE gTLD, 2N Access Commander, ABB ASPECT-Enterprise, Advantive VeraCore, and others. These vulnerabilities include cross-site scripting, man-in-the-middle attacks, use of hard-coded credentials, and improper signature verification. The affected products and versions are listed, along with their corresponding CVE numbers and CVSS scores. The vulnerabilities can be exploited to gain unauthorized access, execute arbitrary code, and cause denial-of-service conditions. In some cases, attackers can exploit these vulnerabilities to escalate privileges, upload malicious files, and perform remote code execution. The affected vendors have released patches and updates to address these vulnerabilities. Users are advised to upgrade to the latest versions to mitigate these risks. The CVSS scores range from 7.1 to 9.9, indicating high to critical severity levels. The vulnerabilities were published between February 3 and 8, 2025. Users should take immediate action to address these vulnerabilities and protect their systems from potential attacks.