OVER 12,000 KERIOCONTROL FIREWALLS EXPOSED TO EXPLOITED RCE

Summary from the TLDR InfoSec newsletter

KerioControl firewalls provide a network security suite for small and medium sized businesses. The ShadowServer Foundation reports that over 12K devices are currently exposed to attacks leveraging a 1-click RCE vulnerability. The vulnerability was caused by improper sanitization of a GET parameter which led to Reflected XSS and resulted in a 1-click RCE.