09. 03. 2021 Oreste Attanasio Contribution, NetEye, Unified Monitoring

NeDi 1.9 security advisory

Synopsis

Critical: NeDi security update

Type/Severity

Security Advisory: Critical

Topic

An update for NeDi is now available for NetEye.

NetEye Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

NeDi is integrated in NetEye’s monitoring solution as a network discovery tool.

A security researcher discovered a set of vulnerabilities in NeDi version 1.9C: https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/

Affected version

  • nedi-1.9.100_neteye1.0.1-1.x86_64

Security Fix for NetEye

  • nedi-2.0.120_neteye2.0.0_p0-1.x86_64

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Upgrade to version nedi-2.0.120_neteye2.0.0_p0-1.x86_64.

Please contact your NetEye consultant to get help to upgrade.

Affected Products

NetEye 4.x versions prior to and including 4.16.

CVEs

References

Oreste Attanasio

Oreste Attanasio

Team Leader Service & Support at Würth Phoenix
I graduated in Applied Computer Science at the University of Bolzano in 2006. After 3 years of experience as consultant in a small IT business IT I decided to move on, and found Würth Phoenix as a good starting point for a career. After serving several years as a developer, consultant and support engineer, I now lead the Service & Support Team and aim to deliver best quality services to our customers, by helping them using our products together with the strength of Open Source, in which I strongly believe in.

Author

Oreste Attanasio

I graduated in Applied Computer Science at the University of Bolzano in 2006. After 3 years of experience as consultant in a small IT business IT I decided to move on, and found Würth Phoenix as a good starting point for a career. After serving several years as a developer, consultant and support engineer, I now lead the Service & Support Team and aim to deliver best quality services to our customers, by helping them using our products together with the strength of Open Source, in which I strongly believe in.

Leave a Reply

Your email address will not be published. Required fields are marked *

Archive