Live
- PM Modi highlights govt's efforts to make Odisha prosperous and one of the fastest-growing states
- Hezbollah fires 200 rockets at northern, central Israel, injuring eight
- Allu Arjun's Family Appearance on Unstoppable with NBK Breaks Viewership Records
- Unity of hearts & minds essential for peace & progress, says J&K Lt Governor
- IPL 2025 Auction: I deserve Rs 18 cr price, says Chahal on being acquired by Punjab Kings
- EAM Jaishankar inaugurates new premises of Indian embassy in Rome
- Sailing vessel INSV Tarini embarks on second leg of expedition to New Zealand
- Over 15,000 people affected by rain-related disasters in Sri Lanka
- IPL 2025 Auction: RCB acquire Hazlewood for Rs 12.50 cr; Gujarat Titans bag Prasidh Krishna at Rs 9.5 crore
- Maharashtra result reflects the outcome of Congress' destructive politics: BJP's Shazia Ilmi
CERT-In finds vulnerabilities in Google Chrome, Siemens products
The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology
New Delhi: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, on Friday warned users of vulnerabilities in Google Chrome and Siemens products, which could allow an attacker to execute arbitrary code on the targeted system.
The affected software in Google Chrome includes -- Chrome versions prior to 125.0.6422.112/.113 for Windows and Mac and versions before 125.0.6422.112 for Linux.
The affected Siemens products include -- Parasolid, SIMATIC RTLS, Simcenter Nastran, SIMATIC CN 4100, RUGGEDCOM, Solid Edge, Teamcenter Visualisation, JT2Go, CPC80, CPCI85, and six more.
"A vulnerability has been reported in Google Chrome for Desktop which could be exploited by a remote attacker to execute arbitrary code on the targeted system," said the CERT-In advisory.
The 'Remote Code Execution' vulnerability exists in Google Chrome for Desktop due to the 'Type Confusion' flaw in V8. An attacker could exploit this vulnerability by sending a specially crafted request.
Moreover, the cyber agency said that the multiple vulnerabilities reported in Siemens Products could allow an attacker to execute arbitrary code, escalate privileges or perform denial of service (DoS) conditions on the targeted system.
The agency suggested users apply appropriate security updates as mentioned by the companies.
