Hanno Heinrichs

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV Series Routers versions prior to the fixed version Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers (affected versions not specified) **Description** The issue concerns a stack-based buffer overflow vulnerability and insufficient authorization procedure in the web interface of Cisco Small Business RV Series Routers. This could allow a remote attacker to elevate privileges to the level of root, execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause denial of service (DoS). **Recommendations** For Cisco Small Business RV Series Routers, update to a version that includes the fix for this vulnerability. For Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers, apply the recommended patch or update to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to the vulnerable web interface until a patch is available. Avoid using unsigned software and ensure proper authentication and authorization mechanisms are in place to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Palo Alto GlobalProtect Agent for Linux versions 5.0.4 and earlier Palo Alto GlobalProtect Agent for Linux versions 4.1.12 and earlier Palo Alto GlobalProtect Agent for MacOS versions 5.0.4 and earlier Palo Alto GlobalProtect Agent for MacOS versions 4.1.12 and earlier **Description** The issue is related to insufficient access control in corporate VPN applications, which can be exploited to elevate privileges. A local privilege escalation exists that can allow non-root users to overwrite root files on the file system. **Recommendations** For GlobalProtect Agent for Linux version 5.0.4 and earlier, update to a version later than 5.0.4 to resolve the issue. For GlobalProtect Agent for Linux version 4.1.12 and earlier, update to a version later than 4.1.12 to resolve the issue. For GlobalProtect Agent for MacOS version 5.0.4 and earlier, update to a version later than 5.0.4 to resolve the issue. For GlobalProtect Agent for MacOS version 4.1.12 and earlier, update to a version later than 4.1.12 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** GlobalProtect Agent for Windows versions 5.0.3 and earlier GlobalProtect Agent for Windows versions 4.1.12 and earlier **Description** A Local Privilege Escalation issue exists in the auto-update feature of the GlobalProtect Agent for Windows, where an attacker can modify the GlobalProtect Agent MSI installer package on disk before installation due to insufficient access control. This can allow an attacker to elevate their privileges by loading a modified MSI package installer onto the disk before the application installation process. **Recommendations** For GlobalProtect Agent for Windows versions 5.0.3 and earlier, update to a version later than 5.0.3 to resolve the issue. For GlobalProtect Agent for Windows versions 4.1.12 and earlier, update to a version later than 4.1.12 to resolve the issue. As a temporary workaround, consider restricting access to the auto-update feature until a patch is available.