Johndoe

**Name of the Vulnerable Software and Affected Versions** Linksys E2500 version 3.0.04.002 **Description** The `chroot local user` option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks. **Recommendations** Disable the `chroot local user` option in the vsftpd configuration file.

**Name of the Vulnerable Software and Affected Versions:** Juniper Networks Junos OS on SRX Series versions prior to 21.4R3-S9 Juniper Networks Junos OS on SRX Series versions 22.2 through 22.2R3-S5 Juniper Networks Junos OS on SRX Series versions 22.4 through 22.4R3-S5 Juniper Networks Junos OS on SRX Series versions 23.2 through 23.2R2-S3 Juniper Networks Junos OS on SRX Series versions 23.4 through 23.4R2-S5 Juniper Networks Junos OS on SRX Series versions 24.2 through 24.2R2 **Description:** An incorrect authorization vulnerability exists in the web server of Juniper Networks Junos OS on SRX Series. This allows an unauthenticated, network-based attacker to access the Juniper Web Device Manager (J-Web). The issue occurs when Juniper Secure connect (JSC) is enabled on specific interfaces, or multiple interfaces are configured for J-Web, making the J-Web UI reachable over more than the intended interfaces. **Recommendations:** Update to Junos OS version 21.4R3-S9 or later. Update to Junos OS version 22.2R3-S5 or later. Update to Junos OS version 22.4R3-S5 or later. Update to Junos OS version 23.2R2-S3 or later. Update to Junos OS version 23.4R2-S5 or later. Update to Junos OS version 24.2R2 or later.

Name of the Vulnerable Software and Affected Versions: MediaWiki - MsUpload extension versions 1.39.X through 1.39.12 MediaWiki - MsUpload extension versions 1.42.X through 1.42.6 MediaWiki - MsUpload extension versions 1.43.X through 1.43.1 Description: The MsUpload extension for MediaWiki is vulnerable to stored XSS via the `msu-continue` system message, which is inserted into the DOM without proper sanitization. This issue occurs in the file upload UI when the same filename is uploaded twice. Recommendations: For MediaWiki - MsUpload extension versions 1.39.X through 1.39.12, update to version 1.39.13 or later. For MediaWiki - MsUpload extension versions 1.42.X through 1.42.6, update to version 1.42.7 or later. For MediaWiki - MsUpload extension versions 1.43.X through 1.43.1, update to version 1.43.2 or later.

Name of the Vulnerable Software and Affected Versions: Mediawiki - CheckUser extension versions 1.39.0 through 1.39.12 Mediawiki - CheckUser extension versions 1.42.0 through 1.42.6 Mediawiki - CheckUser extension versions 1.43.0 through 1.43.1 Description: The CheckUser extension’s Special:Investigate interface is vulnerable to reflected XSS due to improper escaping of certain internationalized system messages rendered on the “IPs and User agents” tab. Recommendations: For versions 1.39.0 through 1.39.12, update to version 1.39.13 or later. For versions 1.42.0 through 1.42.6, update to version 1.42.7 or later. For versions 1.43.0 through 1.43.1, update to version 1.43.2 or later.

**Name of the Vulnerable Software and Affected Versions** Veeam Backup & Replication versions prior to 12.3.2.3617 **Description** A critical remote code execution (RCE) vulnerability allows authenticated domain users to execute code on the Backup Server. This vulnerability affects Veeam Backup & Replication software, specifically impacting backup servers that are joined to a Windows domain. The estimated number of potentially affected devices worldwide is not explicitly stated, but it is mentioned that over 550,000 clients use Veeam's solutions, including 82% of Fortune 500 companies and 74% of Global 2000 firms. There have been real-world incidents where this issue was exploited, with attackers targeting Veeam Backup & Replication servers. **Recommendations** To resolve the issue, update Veeam Backup & Replication to version 12.3.2.3617 or later. As a temporary workaround, consider restricting access to the Backup Server to minimize the risk of exploitation. Additionally, follow isolation best practices to reduce the attack surface.

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the formSetFirewallCfg function via the `firewallEn` parameter. Recommendations: For Tenda AC6 version 15.03.05.16 multi, as a temporary workaround, consider disabling the `formSetFirewallCfg` function until a patch is available. Restrict access to the firewall configuration to minimize the risk of exploitation. Avoid using the `firewallEn` parameter in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HPE StoreOnce Software (affected versions not specified) **Description** A command injection remote code execution issue exists. This allows for potential code execution on affected systems. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.