Warning: Detecting a Very Serious Vulnerability in Cyberoam, a

This updated guide examines Warning: Detecting a Very Serious Vulnerability in Cyberoam, a and organizes the essential facts, background, and practical takeaways in clear American English.

• Warning: Jenkins exists a serious security hole that helps hackers gain control of computers of many Vietnamese businesses

Cyberoam is a firewall protecting website based on user authentication, supporting real-time protection of organizations and businesses against attacks and cyber security threats.

Today, more than 96,000 devices in the world use Cyberoam publicly. In Vietnam, Cyberoam devices are also used by many companies and banks for their security solutions.

To exploit this vulnerability, hackers will access and send packets containing exploit code to the internet admin interface or SSL VPN Consoles (SSL VPN Consoles) to hijack the device. If successful, the bad guy can remotely execute unauthorized commands without providing a username and password.

The danger is that the bad guy will gain the highest level of access to allow any action on the victim's Cyberoam device, such as a deeper attack on the system, tracking all message data, turning off functions. protection, install backdoors into the intranet.

As recommended by VSEC, Vietnamese organizations and businesses using Cyberoam should immediately implement the following measures to ensure safety.

• Cyberoam needs to be updated immediately to the latest version.
• When transmitting data, it is necessary to use encryption methods, including in internal networks.
• Improve user awareness of information security.
• In addition to firewall devices, it is necessary to simultaneously conduct security testing, evaluation and vulnerability scanning on open systems, applying world security standards such as OWASP, ISO 27008.