Widespread disruption to IT services

For security reasons, it is possible that the affected systems may be taken offline completely, including:

• cloud.uni-erfurt.de
• email systems: OWA and Webmail.uni-erfurt.de
• online enrolment
• mobility.uni-erfurt.de
• raumbuchung.uni-erfurt.de
• seat reservation at the university library
• docata.uni-erfurt.de
• ticket system 
• home page in your browser

Please note that there are also restrictions on the EDU-VPN. At present, it is not possible to activate a new EDU-VPN connection.

Background
PHP is a programming language on which countless websites and online applications worldwide are based. It is not only used in traditional websites, but also in well-known programmes such as WordPress, Drupal, TYPO3, Joomla, Magento, Nextcloud, pfSense and OPNsense. This is precisely why it is an attractive target: if attackers find a security vulnerability in PHP, they can immediately attack a huge number of systems at once, across a wide variety of sectors.

There are currently two such security vulnerabilities. So far, no attack exploiting them has been observed. However, the Federal Office for Information Security (BSI) considers it likely that attackers will strike just a few hours after the updates (known as ‘patches’) are released. The reason: with the help of AI tools, it is now possible to very quickly identify which vulnerability an update addresses and to build a suitable attack programme (‘exploit’) based on this.

The BSI has urged IT managers to act immediately, i.e. to install the updates as quickly as possible. The relevant staff members have already been informed and are working to resolve the issue.

However, it is not yet clear when all disruptions will be resolved. We ask for your understanding and patience.