PatchTheCVEnfsen vulnerabilities and fixes
Recent CVEs affecting nfsen, with upgrade or downgrade steps. 4 tracked.
nfsen has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2017-07-10. Highest priority: CVE-2017-6972 (score 68/100).
- CVE-2017-7175 CRITICAL 9.9 UPGRADE NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the cu
- CVE-2017-6972 CRITICAL 9.8 UPGRADE UPGRADE AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessa
- CVE-2017-6971 HIGH 8.8 UPGRADE UPGRADE AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbit
- CVE-2017-6970 HIGH 8.4 UPGRADE UPGRADE AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands i
FAQ
How do I fix nfsen vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nfsen being exploited right now?
None of the tracked nfsen CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nfsen CVE should I patch first?
CVE-2017-6972 currently ranks highest (68/100): AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessa.