Cyber alerts - NHS England Digital

Sophos has released details of an SQL injection zero day vulnerability affecting their XG Firewall product series. They claim that an unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code or extract sensitive information

3390 High

Published Wednesday 11 March 2020 (12:00) (updated 16 June 2020)

SMBGhost SMBv3 Remote Code Execution Vulnerability

A wormable remote code execution vulnerability affecting Windows 10 and Windows Server 2019

CC-3390 High

Published Wednesday 11 March 2020 (12:00) (updated 29 June 2021)

SMBGhost SMBv3 Remote Code Execution Vulnerability

Microsoft has released details of a buffer overflow vulnerability, known as SMBGhost (or Bluesday, CoronaBlue, DeepBlue 3, NexternalBlue or Redmond Drift), affecting the Server Message Block version 3.1.1 (SMBv3) protocol. It could be exploited to execute arbitrary code on vulnerable systems.

CC-3346 High

Published Thursday 23 January 2020 (12:00) (updated 10 January 2022)

NotRobin Backdoor

NotRobin is a backdoor that targets Citrix/NetScaler appliances.

CC-3327 High

Published Tuesday 14 January 2020 (12:00) (updated 21 January 2020)

Citrix RCE Vulnerability in Multiple Products

Citrix has released details of a remote code execution (RCE) vulnerability and recommended steps for mitigation. Threat actors now appear to be targeting vulnerable devices.