SoosanINT Recommends Security Update for Vulnerabilities in SecureWise VPN Products

Overview

 

An update has been released to address vulnerability in domestic VPN products. Users of affected versions should update to the latest version.

 

Affected Products

 

SecureGuard

  • VPN version 2.0.0.6

 

SecuwaySSL VPN

  • U 1.0 with versions 1.0.0.5, 1.0.0.6, 1.0.0.7
  • U 2.0 of 2.0 versions 2.0.0.4, 2.0.1.0, 2.0.2.0, 2.0.3.0, 2.0.4.0

 

Resolved Vulnerabilities

 

Remote Code Execution (RCE) Vulnerability in SecureGuard VPN by SoosanINT

Remote Code Execution (RCE) Vulnerability in SecuwaySSL VPN by Secuwiz

 

Solution

 

Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest vulnerability patches version.

  ※  For both products, patch files are delivered to customers directly from the manufacturer

SecureGuard VPN

  • Check the patch file (bbugfix_imsi_20191118_202406041453.tar) in the server HISTORY log folder and apply it

 

SecuwaySSL VPN

  • Apply the patch file from the manufacturer and check whether “/patchdate_T3” is added to the version information

 

Referenced Sites

 

SoosanINT contact number : 02-750-0817

Homepage address : www.soosanint.com

Secuwiz contact number : 02-6380-3680

Homepage address : www.secuwiz.co.kr