Hello and welcome to the Monday, July 27th, 20206 edition of the Sands

and that's Storm Center's Stormcast. My name is Johannes Ulrich, recorded

from Jacksonville, Florida by teaching online this week in London. And this episode is brought you by the sands.edu undergraduate certificate program

in cyber security fundamentals.

This weekend, I noticed some scans for ESAFNet CDG 3.

This is not the first time we saw scans for this particular product. A couple years ago,

cross-ed scripting vulnerability was discovered in the product, and we saw some scans around that time.

There are really sort of three vulnerabilities that are commonly being quoted for this particular product.

One is the cross-ed scripting vulnerability,

then there's a SQL injection vulnerability,

and the one that we see scans right now for

is for hard-coded passwords.

That's probably the most straightforward one to exploit

when it comes to e-safnet CDG. This is a product mainly focusing on the Chinese

market, all their website and such is in Chinese. Now, the product itself builds itself as a secure

document management, the leakage prevention system. The vulnerability is, well, well, the fixed passport stuff is pretty bad,

but I think are sort of in line with what we typically see with these kind of expensive products

that are proposing to be more secure than others,

but, well, still have some of the same vulnerabilities.

And Relya Quest has a good write-up of some recent attacks

that supposedly were perpetrated by some Russian threat actors

that targeted hospitality Wi-Fi gateways. So they're going after the gateway,

...