Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-43762PUBLISHED: 2023-02-08Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages
CVE-2022-43763PUBLISHED: 2023-02-08Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions < R 4.2-07.
CVE-2022-43764PUBLISHED: 2023-02-08Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.
CVE-2022-43765PUBLISHED: 2023-02-08B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service.
CVE-2022-2094PUBLISHED: 2023-02-08The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting
User Rank: Ninja
4/23/2020 | 9:59:36 AM
I have been a proponent of PaloAlto Networks since their inception using AppID and controlling the application, I think this goes right inline with the ability to create networks (as long as the network is consistent - good data in, good data out, this is where CloudGenix comes into play, they use YAML files to create automated SDNs and Physical networks).
I do think with PaloAlto's R&D team, they could improve this CloudGenix process because it looks like it is not polished, more from a DevOps perspective. I did see from the video (CloudGenix, the admin where the admin had to make changes and create variables in the YAML file "type: {switch}"; the application should have done this, hopefully they can move this process to the next level.
It is an interesting time.
Todd