LUCAMEThe US Cybersecurity and Infrastructure Security Agency has added six newly confirmed vulnerabilities to its catalogue of flaws that attackers are known to be exploiting in the wild. Four of the entries affect Plex Media Server, covering weaknesses that could allow attackers to forge server-side requests, manipulate file paths, or inject malicious content into web pages. The remaining two affect SiteGuard Server Edition and Siemens Software Centre respectively, both carrying serious remote exploitation risks.
What this means for your business
If your business runs Plex Media Server anywhere on its network, including on a staff member's machine, you should check whether it is up to date and whether it is accessible from outside your internal network. The Siemens and SiteGuard flaws are less likely to affect most small businesses directly, but if you use either product your IT provider should be made aware immediately so patches can be applied without delay.