Storm Watch | Cyber Insights | Ivanti's Security Revamp, Dodging the XZ Bullet & D-Link's NAS Crisis
Summary: Ivanti CEO Jeff Abbott publicly committed to a comprehensive security overhaul after a series of breaches linked to vulnerabilities in the company's products, including CVE-2024-21894, a heap overflow in Ivanti Connect Secure and Policy Secure, with a pledge to adopt a Secure-By-Design ethos. The episode also covers software engineer Andres Freund's routine maintenance work that uncovered a backdoor in the Linux XZ software, and active exploitation of CVE-2024-3273, a remote code execution vulnerability in D-Link NAS devices involving a hardcoded backdoor account and a command injection flaw, with perhaps 92,000 devices at risk.
Bottom line: Roughly 92,000 D-Link NAS devices may be exposed to a remote code execution flaw that is already being exploited in the wild, and the vulnerability combines a hardcoded backdoor account with a command injection flaw - legacy gear that never gets patched is where this lands.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-21894CVE-2024-3273
- Related
- CVE-2024-3273: D-Link Multiple NAS Devices Command Injection Vulnerability Known Exploited Vulnerabilities · Apr 11, 2024Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026