SoosanINT Recommends Security Update for Vulnerabilities in SecureWise VPN Products
Overview
An update has been released to address vulnerability in domestic VPN products. Users of affected versions should update to the latest version.
Affected Products
SecureGuard
- VPN version 2.0.0.6
SecuwaySSL VPN
- U 1.0 with versions 1.0.0.5, 1.0.0.6, 1.0.0.7
- U 2.0 of 2.0 versions 2.0.0.4, 2.0.1.0, 2.0.2.0, 2.0.3.0, 2.0.4.0
Resolved Vulnerabilities
Remote Code Execution (RCE) Vulnerability in SecureGuard VPN by SoosanINT
Remote Code Execution (RCE) Vulnerability in SecuwaySSL VPN by Secuwiz
Solution
Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest vulnerability patches version.
※ For both products, patch files are delivered to customers directly from the manufacturer
SecureGuard VPN
- Check the patch file (bbugfix_imsi_20191118_202406041453.tar) in the server HISTORY log folder and apply it
SecuwaySSL VPN
- Apply the patch file from the manufacturer and check whether “/patchdate_T3” is added to the version information
Referenced Sites
SoosanINT contact number : 02-750-0817
– Homepage address : www.soosanint.com
Secuwiz contact number : 02-6380-3680
– Homepage address : www.secuwiz.co.kr