Zyxel Threat Intelligence (Release Date: 2021-05-31)

zyxel_Lin
zyxel_Lin Posts: 73  Zyxel Employee
Friend Collector Third Anniversary
edited September 2021 in Security Highlight

Release Date: 2021-05-31

ZyWALLs latest virus/malware signature update protect you against more malware and threat. See how ZyWALL defends against these threats. You can view more about their details, history, and signature information in Zyxel Encyclopedia.


1. Virus/Malware

Number of updated signatures: 42375

Total number of signatures(Full): 632655 

Highlight

Win32.Worm.Rimecud

Description: The family of worms that typically spread via email, removable drives usually by misuse of the Windows Autorun function and through instant messaging (IM) networks. The worms can also install a backdoor program onto an infected machine and let a remote malicious hacker to access and control your PC.

DeepScan.Generic.Application.CoinMiner

Description: A Trojan Horse that uses the infected device’s memory, CPU, Internet connection to mine digital currency, such as Bitcoin, Litecoin, Dogecoin, Monero or Dash without user’s permission. The Trojan Miner attacks CPU and GPU power, this may cause decreased device performance including:

  • Very high CPU and graphics cards usage.
  • The speed of computer is greatly reduced
  • Slower power charging speed
2. Intrusion Detection

Number of updated signatures: 5

Total number of signatures(Full): 5385

Highlight

CVE-2019-8044

CVSS Base Score: 9.8

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a double free vulnerability. Successful exploitation could lead to arbitrary code execution. (Source: NIST)

CVE-2020-9054

CVSS Base Score: 9.8

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and later QTS 4.5.1.1495 Build 20201123 and later QTS 4.3.6.1620 Build 20210322 and later QTS 4.3.4.1632 Build 20210324 and later QTS 4.3.3.1624 Build 20210416 and later QTS 4.2.6 Build 20210327 and later QuTS hero h4.5.1.1491 build 20201119 and later. QTS & QuTS are the QNAP’s operating system. (Source: NIST)

3. Application Patrol

Total number of added applications: 3

Total number of updated applications: 95

Total number of applications: 3744

Highlight

3 applications have been added. The updated applications would be different by models. See more information via Zyxel Encyclopedia.