Threat Source Newsletter (March 25, 2021)
Summary: Cisco Talos reported that attackers are actively exploiting a critical unauthenticated remote command execution vulnerability in F5 BIG-IP and BIG-IQ devices, which F5 disclosed and patched earlier in March, with proof-of-concept exploit code posted to GitHub shortly after disclosure and CISA issuing a weekend warning urging users to patch. Talos also noted that NETGEAR disclosed multiple vulnerabilities, some critical, in two ProSAFE Plus switches, and could not fix five high-risk flaws due to system-on-chip CPU and memory limitations, though exploitation requires the Plus Utility feature that has been disabled by default since 2019.
Why it matters: F5 patched the flaw, but many devices remain unpatched while attackers scan for them and working exploit code is already public - the window between disclosure and compromise has effectively closed.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Mentions
- CVE-2020-35231
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026