Context over chaos. Disconnected technologies, siloed data, and reactive processes can only get you so far. Protecting businesses in today’s threat landscape demands more than a set of security tools – it requires context.
That's where Avertium comes in
Security. It’s in our DNA. It’s elemental, foundational. Something that an always-on, everything’s-IoT-connected world depends on.
Helping mid-to-enterprise organizations protect assets and manage risk is our only business. Our mission is to make our customers’ world a safer place so that they may thrive in an always-on, connected world.
Best-in-class technology from our partners... backed by service excellence from Avertium.
Interested in becoming a partner?
With Avertium's deal registration, partners can efficiently and confidently connect with Avertium on opportunities to protect your deals.
Microsoft Copilot for Security analyzes and synthesizes high volumes of security data which can help healthcare cybersecurity teams do more with less.
Dive into our resource hub and explore top
cybersecurity topics along with what we do
and what we can do for you.
overview
Two critical vulnerabilities have been found in F5's Next Central Manager. These vulnerabilities, tracked as CVE-2024-21793 (OData injection) and CVE-2024-26026 (SQL injection), have a CVSS score of 7.5. The vulnerabilities impact F5 Next Central Manager versions ranging from 20.0.1 to 20.1.0.
CVE-2024-26026
If this vulnerability is successfully exploited, it could result in remote code execution within the service account's context. Depending on the permissions granted to the service account, an attacker may be able to install software, access, modify, or delete data, or create new accounts with extensive user privileges.
CVE-2024-21793
This vulnerability is an SQL injection vulnerability and could allow unauthorized attackers to execute malicious SQL commands via the API of the BIG-IP Next Center Manager. Like the vulnerability above, CVE-2024-21793 allows threat actors to execute malicious code remotely, granting them full administrative control over affected devices.
Although neither vulnerability has been exploited in the wild, F5 users are strongly encouraged to update to the latest software versions, 20.2.0. Network administrators should implement stringent access controls and be on the lookout for any signs of unauthorized access or suspicious activity.
INDICATORS OF COMPROMISE (IoCs)
At this time, there are no known IoCs associated with the above vulnerabilities. Avertium remains vigilant in locating IoCs for our customers. Should any be located, Avertium will disclose them as soon as possible. For more information on how Avertium can help protect your organization, please reach out to your Avertium Service Delivery Manager or Account Executive.
SUPPORTING DOCUMENTATION