Comodo Unified Threat Management Web Console 2.7.0 - RCE

Unified Threat Management enhances enterprise security by allowing IT administrators to monitor and manage multiple security applications and related infrastructure components from a single management console.A vulnerability was found in Comodo Unified Threat Management Web Console that allows remote code execution. Before version 2.7.0 of Comodo UTM Firewall, remote attackers can use a crafted URL to execute arbitrary code without authentication.

Mitigation / Precaution

We suggest you update Comodo Unified Threat Management Web Console to a version greater than 2.7.0 in order to fix this vulnerability.

Written by

Nash N Sulthan

Cyber Security Lead Engineer

Nash is a seasoned Security Engineer who brings a multifaceted approach to safeguarding digital environments. Not only does he excel in implementing robust security measures, but he's also deeply involved in the research and development process, constantly innovating to stay ahead of cyber threats. Nash's commitment to security extends beyond the conventional, making him a valuable contributor to the evolving landscape of digital defense.