Critical Vulnerabilities in Gladinet Triofox Server Agent Expose Corporate Data

#cybersecurity #infosec

Summary

Gladinet Triofox Server Agent is affected by six vulnerabilities, including three critical 9.8 CVSS flaws that allow unauthenticated remote code execution and full file system access via port 7878.

Take Action:

Plan a quick update to your Triofox Server Agent to version 17.3.10565.57509 or later and make sure to the port 7878 is not exposed to the public internet and is only accessible through a secure VPN.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines