Antivirus software is security software that detects, prevents and removes malware on endpoints and other systems, using signature-based and behavioral techniques, and serves as a core control in enterprise endpoint protection, compliance programs and incident detection workflows.
AVEVA has reported a vulnerability in its Application Server Immutable Deployment Environment that could allow attackers to exploit improper HTML script neutralization. Users are advised to update to secure versions and implement defensive measures to minimize risk.
General Industrial Controls' Lynx+ Gateway faces multiple vulnerabilities, including weak password requirements and missing authentication. These issues could lead to unauthorized access and denial of service. Users are advised to enhance security measures and follow CISA's recommendations to mitigate risks.
Automated Logic's WebCTRL Premium Server has vulnerabilities including Open Redirect and Cross-Site Scripting (XSS). Users are advised to upgrade to version 9.0 as previous versions are affected. CISA recommends security practices to mitigate potential exploitation.
Emerson's Appleton UPSMON-PRO is vulnerable to a stack-based buffer overflow that can allow remote code execution. The product is end-of-life, and users are advised to replace or implement specific mitigations to protect their systems. Recommended actions include blocking UDP port 2601 and isolating monitoring networks.
Opto 22 has addressed a critical vulnerability in its GRV-EPIC and groov RIO products that could allow remote code execution with root privileges. Users are advised to update to firmware version 4.0.3. Recommended cybersecurity measures for organizations have been outlined by CISA.
A vulnerability affecting Shelly Pro 4PM smart switches (versions prior to v1.6) has been reported, allowing potential Denial of Service conditions due to memory overallocation. Users are advised to update their devices and follow CISA's mitigation recommendations.
The report details a vulnerability in the Shelly Pro 3EM smart DIN rail switch, indicating a CVSS v4 score of 8.3 due to potential Denial of Service conditions. Mitigation recommendations include securing network exposure and employing firewalls and VPNs. No public exploitation has been reported.
Ubia's Ubox camera system has a vulnerability that allows unauthorized access to camera feeds due to insufficiently protected API credentials. CISA advises users on mitigation strategies, including minimizing network exposure and implementing firewall protections.