path traversal

On May 22, 2025, Commvault, a prominent enterprise data backup provider, issued an urgent advisory concerning active cyber threat activity targeting its Metallic software-as-a-service (SaaS) application, hosted within the Microsoft Azure cloud environment. The U.S. Cybersecurity and...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has intensified its ongoing campaign to combat cyber threats by adding a new entry—CVE-2025-4632, a Samsung MagicINFO 9 Server Path Traversal Vulnerability—to its Known Exploited Vulnerabilities (KEV) Catalog. This catalog...

On May 22, the Cybersecurity and Infrastructure Security Agency (CISA) issued two critical advisories focused on vulnerabilities present in Industrial Control Systems (ICS), underlining the persistent challenges facing operational technology in industrial environments. As cyber threats evolve...

Siemens has long been at the forefront of industrial automation, with its SCALANCE product line forming a backbone for secure and reliable industrial networks across manufacturing, energy, transport, and critical infrastructure sectors. The recent exposure of multiple vulnerabilities in the...

A critical security vulnerability, identified as CVE-2025-30387, has been discovered in Microsoft's Document Intelligence Studio On-Prem. This flaw allows unauthorized attackers to elevate their privileges over a network by exploiting improper path traversal mechanisms within the application...

The Cybersecurity and Infrastructure Security Agency (CISA) has recently expanded its Known Exploited Vulnerabilities (KEV) Catalog by adding two critical vulnerabilities identified in the Linux Kernel: CVE-2024-53197: An out-of-bounds access vulnerability. CVE-2024-53150: An out-of-bounds read...

In the rapidly evolving world of industrial automation, the need for robust cybersecurity protocols is more acute than ever, especially with the proliferation of smart devices in critical infrastructure sectors worldwide. One device that epitomizes both the promise and peril of Industry 4.0 is...

Here is a summary based on the article from CISA (Cybersecurity and Infrastructure Security Agency): On March 19, 2025, CISA added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, following evidence of active exploitation. These vulnerabilities frequently serve as attack...

Even the most unassuming boxes hiding away in locked industrial cabinets get their day in the cybersecurity spotlight, and today, the unblinking gaze is turned on the Schneider Electric Sage Series. If you had “vulnerabilities in remote terminal units” on your bingo card—even if you didn’t—strap...

The recent disclosure of CVE-2025-26631 is drawing significant attention among Windows developers and system administrators. This vulnerability in Visual Studio Code—a tool trusted by countless professionals—stems from an uncontrolled search path element. In essence, if an attacker with...

CISA Expands Its Known Exploited Vulnerabilities Catalog with Five New High-Risk CVEs The Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its Known Exploited Vulnerabilities Catalog with five new CVEs that have been actively exploited by threat actors. These...

Hitachi Energy XMC20 Exposed: Navigating the Relative Path Traversal Vulnerability A critical advisory has emerged surrounding Hitachi Energy’s XMC20 series—a core component in many industrial control systems—detailing a relative path traversal vulnerability identified as CVE-2024-2461. With a...

Hitachi Energy XMC20 Vulnerability: A Deep Dive into Relative Path Traversal Risks In today’s threat landscape, even industrial control systems can become the target of sophisticated cyber adversaries. Recent details concerning Hitachi Energy’s XMC20 equipment have revealed a relative path...

Hitachi Energy XMC20 Vulnerability: Relative Path Traversal Exposes Control Systems A new vulnerability alert has surfaced from Hitachi Energy regarding their XMC20 industrial control system. The vulnerability—a relative path traversal flaw (CWE-23) tied to CVE-2024-2461—has raised concerns...

Hitachi Energy XMC20 Vulnerability: Path Traversal Flaw Exposed A recently disclosed vulnerability in Hitachi Energy’s XMC20 industrial control system (ICS) has caught the security community’s attention. Reported under CVE-2024-2461, this relative path traversal flaw presents a serious risk by...

Hitachi Energy XMC20 Vulnerability: Relative Path Traversal Exposed In a wake-up call for industrial control systems (ICS) security, a new vulnerability discovered in Hitachi Energy’s XMC20 product family has been making the rounds. With the potential to allow remote attackers to traverse...

Hitachi Energy XMC20 Vulnerability: Update & Mitigation Guide In a development that underscores the ongoing challenges in securing industrial control systems, Hitachi Energy has issued an advisory on a vulnerability affecting its XMC20 products. This vulnerability, classified as a Relative Path...

In today’s interconnected industrial and IT environments, even systems that lie outside your typical Windows daily routine can significantly impact overall network security. A new advisory from the Cybersecurity and Infrastructure Security Agency (CISA) has flagged a critical vulnerability in...

A newly released cybersecurity advisory from the Cybersecurity and Infrastructure Security Agency (CISA) has put Siemens’ SiPass integrated systems under the spotlight. The advisory, released on February 20, 2025, details a high-severity vulnerability that could allow remote attackers to exploit...

As cybersecurity threats continue to evolve, organizations that rely on industrial control systems (ICS) must remain ever vigilant. The recent advisory from the Cybersecurity and Infrastructure Security Agency (CISA) regarding Siemens' SiPass integrated products underscores a critical...