The Centre for Cybersecurity Belgium recommends system administrators to patch vulnerable systems as soon as possible and to analyse system and network logs for any suspicious activity.

The Centre for Cyber Security Belgium strongly recommends system administrators to take the following actions:

Enable the Enhanced PAPI Security feature using a non-default key will prevent exploitation of these vulnerabilities.

The CCB recommends administrators to install updated versions of the FortiNAC webserver and FortiWeb proxy daemon released by the ve

The CCB recommends administrators to upgrade to Apache Commons FileUpload 1.5 or later released by the vendor.

The Centre for Cyber Security Belgium strongly recommends system administrators to take the following actions in order to mitigate the impact of this vulnerability in the most efficient way:

Scope

The Centre for Cyber Security Belgium strongly recommends Windows system administrators to install updates for vulnerable systems with the highest priority, after thorough testing.

The Centre for Cyber Security Belgium strongly recommends system administrators to take the following actions:

• Apply the emergency patch 7.1.2 as soon as possible
• Ensure that the administrative console is accessible only from:
  • Within a private company network
  • VPN
  • Allow-listed IP addresses (cloud environments) 

The Centre for Cyber Security Belgium strongly recommends system administrators to take the following actions:

Immediately deactivate the SLP service on all ESXi hypervisors which have not yet been updated.