Third Party Software Updates: June 2018
Roku TV & Sonos IoT devices, which are widely used in businesses that handle sensitive consumer data, such as credit card number and health records, are vulnerable to DNS hacking. These two IoT devices are frequently installed within fast casual dining, medical and dentist businesses.
These devices can be exploited thanks to two common IoT issues; IoT devices do not require authentication for connections received on a local network and because HTTP is more prevalent to control embedded devices.These vulnerabilities could enable anyone to “virtually map” your network, which has much wider consequences such as DoS (Denial of Service) to your most critical infrastructure, disrupting your end user experience or potentially planning much more sophisticated cyber warfare.Just imagine what could happen if a hacker could learn the OS host name & IP information for all your servers.
Both Roku and Sonos are actively working to resolve these issues, but updates will be necessary to secure your devices.
Start a trial with Syxsense and see if these devices are in your network.
Third-Party Patch Updates
Below is a table of third-party updates from June 2018:
| Vendor | Category | Patch Version and Release Notes: | CVSS SCORE |
| Adobe | Media Software |
AIR: v30.0.0.107 – https://helpx.adobe.com/flash-player/release-note/fp_30_air_30_release_notes.html
Flash Player: v30.0.0.113 – https://helpx.adobe.com/security/products/flash-player/apsb18-19.html
|
N/A |
| Citrix |
Citrix Receiver: v4.12 – https://docs.citrix.com/en-us/receiver/windows/current-release.html
|
||
| Evernote |
Evernote: v6.13.13.7425 –
|
||
| FileZilla | FTP Solution |
FileZilla: v3.34 – https://filezilla-project.org/versions.php
|
N/A |
| Browser |
Chrome: v67.0.3396.99 – https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-chrome-os_26.html
|
N/A | |
|
Malwarebytes |
Antivirus |
Malwarebytes: v3.5.1.2522 – https://www.malwarebytes.com/support/releasehistory/
|
|
| Mozilla | Browser and Email Application |
Firefox: v60.0.2 – https://www.mozilla.org/en-US/firefox/60.0.2/releasenotes/
|
|
| Peter Pawlowski | Audio Player |
Foobar2000: v1.4 – https://www.foobar2000.org/changelog
|
|
| Uvnc bvba | Remote Access Tool |
UltraVNC: v1.2.2.1
|
|
| WinSCP | SFTP, SCP, and FTP client |
WinSCP: v5.13.3 – https://winscp.net/eng/docs/history
|
