Tanzania Computer Emergency Response Team

Cisco has released security updates to address vulnerabilities to its multiple products. Exploitation of these vulnerabilities may allow an attacker to cause a denial-of-service condition. Users and administrators are encouraged to review Cisco Security Advisories cisco-sa-snort-ethernet-dos and cisco-sa-sdw-sqlinj and apply necessary updates.

Cisco Talos has released security update to address a vulnerability in Accusoft ImageGear. Exploitation of this vulnerability may allow an attacker to gain access to sensitive information. Users and administrators are encouraged to review Talos Security Advisory and apply necessary updates.

Juniper has released security updates to address a vulnerability to its multiple products. Exploitation of this vulnerability may allow an attacker to gain access to sensitive information. Users and administrators are encouraged to review Juniper Security Advisory and apply necessary updates.

Trend Micro has released security updates to address a vulnerability to its multiple products. Exploitation of this vulnerability may allow an attacker to cause a denial-of-service condition. Users and administrators are encouraged to review Trend Micro Security Bulletin and apply necessary updates.

Advisory No: TZCERT/SA/2021/03/04 Date of First Release: 04th March 2021 Source: Microsoft Software Affected:  Microsoft Exchange Server 2013Microsoft Exchange Server 2016Microsoft Exchange Server 2019 Overview: The four Microsoft Exchange vulnerabilities are part of an attack chain that may cause an unauthenticated attacker to execute arbitrary code remotely. These vulnerabilities are Server-Side Request Forgery (SSRF) …