Cisco Talos Vulnerability Discovery & Research team identified and disclosed three vulnerabilities in WolfSSL (two improper input validation and one integer underflow), fourteen advisories covering 37 CVEs in GeoVision products (including memory corruption, OS command injection, buffer overflows, privilege escalation, reflected XSS, guessable session cookies, and insufficient encryption), and one heap-based buffer overflow vulnerability in VTK-DICOM. These vulnerabilities affect products related to embedded security (WolfSSL), security monitoring and access control (GeoVision), and medical imaging data parsing (VTK-DICOM). The vendors have released patches addressing these issues in compliance with Cisco's third-party vulnerability disclosure policy.

The vulnerabilities include a range of issues such as memory corruption, command injection, buffer overflows, privilege escalation, cross-site scripting, and insufficient encryption. These could potentially allow attackers to execute arbitrary code, escalate privileges, bypass authentication, or disrupt normal operations if exploited. However, no known exploits in the wild have been reported. The impact varies by vulnerability but collectively represents a medium severity risk to affected systems.

All disclosed vulnerabilities have been patched by their respective vendors. Users and administrators should apply the official patches provided by WolfSSL, GeoVision, and VTK-DICOM vendors promptly. Cisco Talos also provides Snort rule sets to detect exploitation attempts. No additional mitigation actions are indicated beyond applying these vendor patches.