"Critical Perforce Server Vulnerabilities Expose Network Takeover and System Control"
Microsoft has identified and disclosed four vulnerabilities in Perforce Helix Core Server, including a critical remote code execution bug. The flaws have been patched by Perforce in version 2023.1/2513900, and users are urged to update immediately. Exploitation of the critical vulnerability could give unauthenticated attackers complete control over unpatched systems and connected infrastructure. Microsoft recommends basic security hygiene measures and specific steps for securing Perforce Server, such as using a VPN, issuing TLS certificates, logging all access, and configuring alerts.