vulnerabilities
Critical zero-day in EdgeNexus appliances under active exploitation
An unauthenticated path-traversal in the EdgeNexus management plane is being chained with a known LPE to drop a custom backdoor.
Section
Vulnerabilities
2 stories
Section
2 stories
An unauthenticated path-traversal in the EdgeNexus management plane is being chained with a known LPE to drop a custom backdoor.
A signed driver could be coerced into arbitrary memory writes from user-mode. Patch out, IOC list below.