Telekom Security

Aug 20, 2020 Honeypot Research

T-Pot Version 20.06 released

On June, 30th 2020 we finally released T-Pot 20.06 after an extensive period of testing to ensure the update process (which is still in beta) is not likely to break things. With T-Pot 20.06 released we are proud to see that T-Pot is now ...

Aug 13, 2020 Security Advisory

IBM Maximo Asset Management is vulnerable via XXE

IBM Maximo Asset Management is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

May 15, 2020 Security Advisory

Smuggling HTTP headers through reverse proxies

Under some conditions, it is possible to smuggle HTTP headers through a reverse proxy, even if it was explicitly unset before. This is possible in some cases due to HTTP header normalization and parser differentials. Because HTTP headers...

Mar 09, 2020 Security Advisory

Unquoted Service Path exploit in Fortinet FortiClient

FortiClient for Windows prior to 6.2.3 is vulnerable to an unquoted service path vulnerability (CVE-2019-17658). That may allow an attacker to gain elevated privileges via the FortiClientConsole executable service path.

Jan 31, 2020 Security Advisory

Juniper Junos Space prior to 19.4R1 Local File Inclusion Vulnerability

A Local File Inclusion vulnerability (CVE-2020-1611) in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets.

May 20, 2019 Security Advisory

wolfSSL TLSv1.3 Remote Buffer Overflow

A new critical remote buffer overflow vulnerability (CVE-2019-11873) was discovered in the wolfSSL library (version 4.0.0-stable, http://www.wolfssl.com) by Security Evaluators of Telekom Security with modern fuzzing methods. The vulnera...

Mar 22, 2019 Security Advisory

axTLS Remote Buffer Overflow

A new critical remote buffer overflow vulnerability (CVE-2019-8981) in the axTLS library for embedded devices (version 2.1.4, http://axtls.scourceforge.net was discovered on 2019 February 20 with modern fuzzing methods, which possibly al...

Jan 04, 2019 Honeypot Research

T-Pot Version 19.03 released

In Mach 2019 we released T-Pot 19.03. Read more Details here.

Telekom Security Updates