CVE-2023-6399

Use of Externally-Controlled Format String (CWE-134)

Published: Feb 20, 2024 / Updated: 9mo ago

The advisory highlights the broader risk posed by ransomware and the evolving tactics of cybercriminals targeting critical systems and software vulnerabilities.(Source: The Hacker News) Security researchers discovered about 100 AI and ML models on the Hugging Face platform containing malicious code capable of executing on users' machines, potentially establishing a backdoor for attackers.

Four new vulnerabilities have been discovered in some of the Zyxel Firewall and access point (AP) versions that are associated with Denial of Service, OS Command Injection, and Remote code execution. This vulnerability exists in the file upload binary in Zyxel ATP series devices that could allow an authentication threat actor to execute operating system commands on the affected device via FTP with administrative privileges.

An alert published jointly by intelligence and cyber agencies from the Five Eyes countries, (Australia, Canada, New Zealand, the TUK, and the US) warns that the cyberthreat actors responsible for the SolarWinds attack are developing tactics to target assets held in the cloud infrastructure. - www.securityweek.com : LockBit Ransomware Gang Resurfaces With New Leak Site

CVE-2023-6399 – A format string vulnerability in some firewall versions could allow an authenticated IPSec VPN user to cause DoS conditions against the “deviceid” daemon by sending a crafted hostname to an affected device if it has the “Device Insight” feature enabled. Taiwanese vendor Zyxel warns of security vulnerabilities in its firewalls and access points, including a remote code execution flaw.

A format string vulnerability in some firewall versions could allow an authenticated IPSec VPN user to cause DoS conditions against the “deviceid” daemon by sending a crafted hostname to an affected device if it has the “Device Insight” feature enabled. A null pointer dereference vulnerability in some firewall versions could allow a LAN-based attacker to cause denial-of-service (DoS) conditions by downloading a crafted RAR compressed file onto a LAN-side host if the firewall has the “Anti-Malware” feature enabled.