Attackers target SiteGuard Server Edition flaw to gain root or SYSTEM control

First reported 18 Oct, 14:23 UTCSource: BleepingComputerLast editorial activity 18 Oct, 14:23 UTCWrite a comment ↓

System with various wires managing access to centralized resource of server in data center — Illustrative photo.Photo by Brett Sayles on Pexels

Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that allows them to execute commands with root or SYSTEM privileges on affected servers.

What the vulnerability allows

The flaw is an OS command injection vulnerability in SiteGuard Server Edition, the facts indicate. Its exploitation gives an attacker the ability to execute commands on the affected machines at the level of root or SYSTEM.

Source of the report

The information comes from a single outlet, BleepingComputer, and has not been independently confirmed by WORLDTECH. The scope of the activity therefore remains uncertain.

Open questions

Which versions of SiteGuard Server Edition are affected?
Has a fix been released for the vulnerability?

What Matters Now

Close-up view of popular social media app icons on a smartphone screen. — Photo: Ocko Geserick / Pexels

US banks and Amazon are blocking AI agents like Meta's Muse

Source: Notebookcheck ·19 Oct, 07:38 UTC

A CPU and RAM sticks displayed on a white surface, showcasing computer hardware components. — Photo: Marta Branco / Pexels

Technology DEVELOPING

Linux 7.3 is out with some nice improvements for people with low VRAM AMD cards

Source: XDA ·19 Oct, 06:00 UTC

Key facts

Attackers are exploiting an OS command injection flaw in SiteGuard Server Edition.

Sources & evidence

BleepingComputer Reporting source
Hackers exploit SiteGuard WAF flaw to run commands as admins ↗
https://www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/