Detected Two Extremely Serious Vulnerabilities in the Rconfig

This updated guide examines Detected Two Extremely Serious Vulnerabilities in the Rconfig and organizes the essential facts, background, and practical takeaways in clear American English.

• Warning: Google Chrome is experiencing serious security errors, patch updates right away
• Warning: Detecting a very serious vulnerability in Cyberoam, a common firewall system in Vietnam

These two vulnerabilities affect all versions of rConfig, including the latest version 3.9.2. According to NIST (National Institute of Standards and Technology), the rConfig vulnerability is rated as serious as 9.8 / 10. Today, there is no security patch for these 2 vulnerabilities.

Vietnam Cyber Security Company VSEC said that many Vietnamese businesses will be directly affected by this vulnerability. The network managed by rConfig utility can be easily attacked and controlled by hackers.

In Vietnam, more than 10,000 devices belonging to large networks in enterprises are using the rConfig utility.

Due to the absence of a patch, VSEC recommends that units using rConfig should do the following to avoid unfortunate incidents that may occur.

• Restrict IP address access to the system.
• If not used, block access to the ajaxServerSettingsChk.php module or use alternative administrative solutions.
• As soon as the patch is released, update now.