https://insinuator.net/authors/dennis-mantz/ Recent content in Dennis Mantz on Insinuator.net - Bold Statements Hugo en-us Thu, 09 Jun 2022 00:00:00 +0000 https://insinuator.net/2022/06/security-advisories-for-broadcom-automic-automation-uc4/ Thu, 09 Jun 2022 00:00:00 +0000 https://insinuator.net/2022/06/security-advisories-for-broadcom-automic-automation-uc4/ <h2 id="updated-on-200622-with-cves-and-link-to-broadcom-security-notice">Updated on 20.06.22 with CVEs and link to Broadcom Security Notice.</h2> <p>In April 2021 we reported seven vulnerabilities in Broadcom Automic Automation (UC4) 12.3.5+hf.3. CVE IDs were assigned on 16.06.22, the corresponding Broadcom Security Notice can be found <a href="https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20629">here</a>.</p> <p>The vulnerabilities have been found in the course of a research project, in which we analyzed the security of multiple Endpoint Management solutions. Similar vulnerabilities have been found in other solutions as we pointed out in previous posts about the <a href="https://insinuator.net/2020/06/security-advisories-for-ivanti-dsm-suite/">Ivanti DSM Suite</a>, <a href="https://insinuator.net/2020/07/security-advisories-for-nagios-xi/">Nagios XI</a>, and <a href="https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/">Solarwinds N-Central</a>.  The outcome of the research project will be published as a whitepaper and a conference talk at <a href="https://troopers.de/troopers22/talks/brzgam/">Troopers 2022</a>.</p>