Vulnerabilityhigh

NSA and ASD issue a report warning of web shells deployments

Security Affairsby @securityaffairsApr 24, 2020 · 10:42 UTC (Apr 24, 2020)3 min read4 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-0604 CVE-2019-19781 CVE-2019-3396 CVE-2019-3398 CVE-2019-9978 CVE-2019-18935 CVE-2017-11317 CVE-2017-11357 CVE-2019-11580 CVE-2020-10189 CVE-2019-8394 CVE-2020-0688 CVE-2018-15961

Tags: cve-2019-0604 cve-2019-19781 cve-2019-3396 cve-2019-3398 cve-2019-9978 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-11317 +1 related CVE CVE-2017-11357	Unrestricted File Upload / RCE in Progress Telerik UI for ASP.NET AJAX	9.8	84%	KEVPoC ×2	Aug 23, 2017 KEV Apr 11, 2022
CVE-2018-15961	Unrestricted File Upload Leading to RCE in Adobe ColdFusion	9.8	100%	KEVPoC	Sep 25, 2018 KEV Nov 3, 2021
CVE-2019-0604	RCE in Microsoft SharePoint via Application Package Markup Validation Flaw	9.8	100%	KEVRansomware	Mar 5, 2019 KEV Nov 3, 2021
CVE-2019-11580	Unauthenticated RCE in Atlassian Crowd and Crowd Data Center	9.8	95%	KEVRansomwarePoC	Jun 3, 2019 KEV Nov 3, 2021
CVE-2019-18935	Unauthenticated .NET Deserialization RCE in Progress Telerik UI for ASP.NET AJAX	9.8	100%	KEVRansomwarePoC ×4	Dec 11, 2019 KEV Nov 3, 2021
CVE-2019-19781	Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP	9.8	100%	KEVRansomware	Dec 27, 2019 KEV Nov 3, 2021
CVE-2019-3396	Server-Side Template Injection RCE in Atlassian Confluence Server and Data Center	9.8	100%	KEVRansomwarePoC ×4	Mar 25, 2019 KEV Nov 3, 2021
CVE-2019-3398	Path Traversal Leading to RCE in Atlassian Confluence Server and Data Center	8.8	97%	KEVPoC	Apr 18, 2019 KEV Nov 3, 2021
CVE-2019-8394	Authenticated Arbitrary File Upload in Zoho ManageEngine ServiceDesk Plus	6.5	63%	KEVPoC	Feb 17, 2019 KEV Nov 3, 2021
CVE-2019-9978	Stored XSS in WordPress Social Warfare Plugin (CVE-2019-9978) Exploited in the Wild	6.1	73%	KEVPoC ×5	Mar 24, 2019 KEV Nov 3, 2021
CVE-2020-0688	RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys	8.8	100%	KEVRansomwarePoC ×2	Feb 11, 2020 KEV Nov 3, 2021
CVE-2020-10189	Unauthenticated RCE in Zoho ManageEngine Desktop Central	9.8	100%	KEVPoC ×3	Mar 6, 2020 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

A joint report released by the U. S. NSA and the Australian Signals Directorate (ASD) warns of attackers increasingly exploiting vulnerable web servers to deploy web shells.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.