Threat Pulse 62High
GoAhead embedded web server accepts revoked client certificates (3 flaws)
Severity 6ActiveconfirmedConsumer devicesWeb servers and gateways

Three TLS flaws in the GoAhead embedded server, used in devices from Palo Alto Networks, HP, Canon, Honeywell, Siemens and others, can let revoked client certificates authenticate.

· 9 days ago · thehackernews.com
Sourcesthehackernews.com
On X
@4A4133verifiedOct 26, 20:51 UTC

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead

Open on X
@TheHackersNewsverifiedOct 27, 14:15 UTC

‼️WARNING - Hundreds of millions of devices run GoAhead's embedded web server. Now, 3 TLS vulnerabilities have been disclosed that can allow revoked client certificates to authenticate or expose encrypted sessions to decryption. Affected builds use specific

Open on X
Why this score

Plan rubric with caps (verified sweep, Oct 27)

Back to the board

Updated Nov 5, 01:46 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.