Virtual private network is a network security service that uses encrypted tunnels over public or shared networks to provide private, authenticated connectivity between users, sites, and cloud resources, supporting enterprise remote access, inter-site communication, and compliance with data-in-transit protection requirements.
111 articles about Virtual Private Network
Decision Insights Threat Desk • November 20, 2025
Mitsubishi Electric reported a vulnerability in MELSEC iQ-F Series that may allow Denial of Service attacks via improperly validated TCP packets.
Decision Insights Threat Desk • November 20, 2025
AVEVA Edge versions 2023 R2 and prior are affected by a vulnerability allowing local attackers to brute-force passwords.
Decision Insights Threat Desk • November 20, 2025
General Industrial Controls' Lynx+ Gateway faces multiple vulnerabilities, including weak password requirements and missing authentication. These issues could lead to unauthorized access and denial of service. Users are advised to enhance security measures and follow CISA's recommendations to mitigate risks.
Decision Insights Threat Desk • November 20, 2025
Automated Logic's WebCTRL Premium Server has vulnerabilities including Open Redirect and Cross-Site Scripting (XSS). Users are advised to upgrade to version 9.0 as previous versions are affected. CISA recommends security practices to mitigate potential exploitation.
Decision Insights Threat Desk • November 20, 2025
Emerson's Appleton UPSMON-PRO is vulnerable to a stack-based buffer overflow that can allow remote code execution. The product is end-of-life, and users are advised to replace or implement specific mitigations to protect their systems. Recommended actions include blocking UDP port 2601 and isolating monitoring networks.
Decision Insights Threat Desk • November 20, 2025
Opto 22 has addressed a critical vulnerability in its GRV-EPIC and groov RIO products that could allow remote code execution with root privileges. Users are advised to update to firmware version 4.0.3. Recommended cybersecurity measures for organizations have been outlined by CISA.
Decision Insights Threat Desk • November 18, 2025
A remote code execution vulnerability was found in Vigor routers by Draytek, allowing attackers to inject commands via HTTP requests.
Decision Insights Threat Desk • November 18, 2025
A vulnerability affecting Shelly Pro 4PM smart switches (versions prior to v1.6) has been reported, allowing potential Denial of Service conditions due to memory overallocation. Users are advised to update their devices and follow CISA's mitigation recommendations.
Decision Insights Threat Desk • November 18, 2025
The report details a vulnerability in the Shelly Pro 3EM smart DIN rail switch, indicating a CVSS v4 score of 8.3 due to potential Denial of Service conditions. Mitigation recommendations include securing network exposure and employing firewalls and VPNs. No public exploitation has been reported.
Decision Insights Threat Desk • November 13, 2025
Advantech's DeviceOn/iEdge, an IoT management platform, is subject to multiple vulnerabilities, including XSS and path traversal.
Decision Insights Threat Desk • November 13, 2025
Ubia's Ubox camera system has a vulnerability that allows unauthorized access to camera feeds due to insufficiently protected API credentials. CISA advises users on mitigation strategies, including minimizing network exposure and implementing firewall protections.
Decision Insights Threat Desk • November 13, 2025
ABB's FLXeon Controllers are identified with multiple vulnerabilities, including hard-coded credentials and improper input validation, allowing potential remote exploitation. Users are advised to implement mitigation strategies and update firmware to enhance security.