Weekly Vulnerability Recap - October 30, 2023 - Haunted by Vulnerabilities
Cisco, Citrix, VMware and F5 have been hit by critical vulnerabilities - and VMware took the unusual step of updating an end-of-life product.
Stay updated with breaking news from Traffic Management User Interface. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Cisco, Citrix, VMware and F5 have been hit by critical vulnerabilities - and VMware took the unusual step of updating an end-of-life product.
Fixes have been issued by F5 for a critical severity flaw impacting various versions of its BIG-IP offering, The Hacker News reports.
Each week in October, as part of Cybersecurity Awareness Month, we'll publish an article packed with facts and stats, to give you an in-depth look at the
"Unlike previous notable F5 exploits, not all of these can be easily hand-waved away by restricting external access to the administrative interfaces known as the 'control plane,'" says Justin Rhinehart, senior analyst at Bishop Fox. Two critical exploits disclosed this week affect the so-called data plane, which is the part responsible for handing any and all traffic going through the BIG-IP platform, he says. The only way to mitigate these exploits is by patching. In a worst-case scenario, Rhinehart says, an attacker can use a vulnerable F5 BIG-IP appliance to break into the broader enterp...
The F5 flaws could affect the networking infrastructure for some of the largest tech and Fortune 500 companies – including Microsoft, Oracle and Facebook.