The Hillstone Web Application Firewall (WAF) is engineered to deliver top-tier protection for web servers, applications, and APIs against a wide range of cyber threats.
Employing a sophisticated dual-engine system, the Hillstone WAF combines traditional rule-based detection with advanced semantic analysis to enhance precision and reduce false alarms. Additionally, it leverages machine learning to refine its adaptive security policies, ensuring robust defense against both known and emerging threats.
However, a critical vulnerability has recently been identified within the Hillstone WAF, which poses a significant risk of command injection attacks.
Hillstone WAF Vulnerability
Hillstone Networks’ Web Application Firewall (WAF) has been found to contain a severe command injection flaw. This vulnerability allows attackers to execute arbitrary commands on the affected systems, jeopardizing the security and integrity of protected web applications.
Since the issue was made public on August 19, 2024, it has raised substantial concern among cybersecurity professionals and Hillstone WAF users alike.
In contrast, the Sangfor Web Application Firewall (WAF) stands out as a cutting-edge solution in internet security. It utilizes intelligent and semantic analysis technologies to provide comprehensive protection through web asset discovery, vulnerability scanning, traffic monitoring, and threat identification.
Nevertheless, the Sangfor WAF has also been exposed to a significant command injection vulnerability on its verification code page. This high-risk issue, due to its external visibility, can be exploited by attackers to execute arbitrary commands and potentially compromise server security.
The affected versions of the Sangfor WAF range from 5.5R6-2.6.7 to 5.5R6-2.8.13, with version 5.5R6-2.8.14 addressing this issue through a security update. Immediate upgrade to this patched version is crucial to mitigate the risk.
The impact of this vulnerability extends to the application layer, potentially undermining the WAF’s fundamental role in maintaining continuous website security.
For further assistance or to report security concerns, Hillstone’s Product Security Incident Response Team (PSIRT) can be contacted at PSIRT@hillstonenet.com.
Both Hillstone and Sangfor emphasize the importance of responsible vulnerability disclosure and are committed to protecting user security by adhering to relevant regulations and best practices in incident response.
