Vulnerability "nu-get"

Important safety notice from 27.02.2024

Skip to chapter:

"nu-get" is a vulnerability that can be exploited from the Internet. We use nu-get functionality in TiCom and our system control. We have closed this vulnerability with version 11.12.35 and will make this version available to all customers with the next planned update.

As TiCom is located behind the firewall at our customers' premises, the risk is limited to the security standard that has been set for the respective network.

As Windows Server also uses the component, we recommend that all customers install all the latest security updates and patches for Windows Server.

Further links

Further information on the vulnerability can be found here:

https://github.com/advisories/GHSA-98g6-xh36-x2p7

https://github.com/advisories/GHSA-5mfx-4wcx-rv27

Share