[NEU] [hoch] Tenable Security Nessus: Mehrere Schwachstellen
Multiple high-severity Tenable Nessus flaws—including RCE, SQLi, and privilege escalation—risk turning your own vulnerability scanner into an attack vector if left unpatched.
Summary written by editorial AI · Source link below
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Tenable Security Nessus ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Editorial Analysis
A compromised vulnerability scanner holds credentials and network maps for the entire estate, making these flaws exceptionally dangerous for enterprises relying on Nessus.
Patch all Nessus instances immediately, rotate stored scan credentials, and segment scanner hosts from untrusted networks.
Flaws in the Nessus vulnerability scanner could let attackers leverage our own security tooling for reconnaissance and code execution.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at CERT-Bund (BSI) in a new tab.
More from the Vulnerabilities Desk
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers1d
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software2d
- Abandoned Popcorn Time app exposed millions of devices to RCE attacks3d
- HPE patches eight max severity RCE and auth bypass AOS flaws3d
- Compromised TLS Certificates3d