Cisco Releases Security Advisory for IOS XR Software

Cisco has released a security advisory for a vulnerability affecting IOS XR Software for ASR 9000 Series Routers. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. 
 
CISA encourages users and administrators to review the following advisory and apply the necessary updates. 
•    Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability cisco-sa-bfd-XmRescbT
 

Fortinet Releases March 2023 Vulnerability Advisories

Fortinet has released March 2023 Vulnerability Advisories to address vulnerabilities affecting multiple products. An attacker could exploit one of these vulnerabilities to take control of an affected system. 
 
CISA encourages users and administrators to review the Fortinet March 2023 Vulnerability Advisories page for more information and apply the necessary updates. 
 

FortiOS / FortiProxy – Heap buffer underflow Detectado en la interfaz administrativa

Vulnerabilidad encontrada en FortiOS y FortiProxy

Una vulnerabilidad de escritura de búfer (‘buffer underflow’) en la interfaz administrativa de FortiOS y FortiProxy podría permitir a un atacante remoto no autenticado ejecutar código arbitrario en el dispositivo y / o realizar un DoS en la GUI, mediante solicitudes específicamente diseñadas. Estado de explotación: Fortinet no tiene conocimiento de ninguna instancia en la […]