Cyber Security News

U.S. CISA adds Smartbedded Meteobridge, Samsung, Juniper ScreenOS, Jenkins, and GNU Bash flaws to its Known Exploited Vulnerabilities catalog

Cyware
U.S. CISA adds Smartbedded Meteobridge, Samsung, Juniper ScreenOS, Jenkins, and GNU Bash flaws to its Known Exploited Vulnerabilities catalog

CISA has added multiple critical vulnerabilities, including flaws in Bash, Samsung devices, Jenkins, and Smartbedded Meteobridge, to its Known Exploited Vulnerabilities catalog. These vulnerabilities pose significant risks to both government and private sector systems, urging prompt remediation. #BashBug #SamsungVulnerabilities

Keypoints

  • CISA added several high-severity vulnerabilities to its KEV catalog in October 2024.
  • The Bash Bug (CVE-2014-6271) and related flaws can be exploited for remote code execution.
  • Smartbedded Meteobridge’s web interface vulnerability (CVE-2025-4008) allows unauthenticated remote command execution.
  • Samsung devices are vulnerable to an Out-of-bounds write flaw (CVE-2025-21043), risking remote code execution.
  • FCEB agencies are mandated to fix these vulnerabilities by October 23, 2025, to mitigate attack risks.

Read More: https://securityaffairs.com/182925/hacking/u-s-cisa-adds-smartbedded-meteobridge-samsung-juniper-screenos-jenkins-and-gnu-bash-flaws-to-its-known-exploited-vulnerabilities-catalog.html