https://reddit.com/r/sysadmin/comments/1x9cq73/weekly_home_lab_exploits/: Weekly home lab exploits
Affected Software
Frequently Asked Questions
Which deployment should be handled as a possible active compromise rather than a routine patching task?
Ivanti Connect Secure exposed at the network edge should be patched immediately and treated as potentially compromised until CISA guidance has been worked through. The issue is described as an authentication bypass leading to remote code execution.
Which Windows systems should be prioritized for the Windows Shell update?
Prioritize systems that open email attachments. The update addresses a Mark of the Web bypass and is included in this month's Patch Tuesday.
When is the PAN-OS issue especially urgent?
It is urgent when the PAN-OS management interface is reachable from locations where it should not be, particularly from broadly accessible networks.
Can the FortiOS issue be deferred to a normal maintenance window?
The FortiOS path traversal issue requires administrator access first, so it can be rolled into the next maintenance window based on the information provided.
What is the recommended response for ProFTPD mod_copy exposure?
If FTP remains enabled, move to SFTP. CVE-2015-3306 is old but is still being exploited.