New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure
Acronis links APT36 (Transparent Tribe) to new backdoors PATCHCORD and SHEETCORD targeting Afghan Telecom and Indian government, defense, and energy networks.
61
CVE-2024-6387
- CVSS 3.1
- 8.1 high
- EPSS
- 100%p100
- Published
- ·
- Modified
Description · NVD
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
- Products
- sma 6200 firmware, sma 7200 firmware, eos, ubuntu linux, almalinux, sma 6210 firmware, sma 7210 firmware, sma 8200v firmware, sra ex 7000 firmware, a1k firmware, a70 firmware, a90 firmware
- Weakness
- CWE-364, CWE-362
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news
15 stories60
60
60
60
60
60
60
60
60
60
60
Critical OpenSSH Flaw Enables Full System Compromise
60
47
47