Exploit / PoCcriticalExploited in the wild

What 2024 taught us about security vulnerabilties

Help Net Securityby @helpnetsecurityJan 14, 2025 · 00:00 UTC (Jan 14, 2025)2 min read1 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-3519 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-3519 CVE-2023-20198 CVE-2021-44228

Tags: cve-2023-3519 cve-2023-20198 cve-2021-44228 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2023-20198	Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)	10.0	100%	KEV	Oct 16, 2023 KEV Oct 16, 2023
CVE-2023-3519	Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway	9.8	100%	KEVRansomwarePoC	Jul 19, 2023 KEV Jul 19, 2023

From the original article

2 min read at helpnetsecurity.com

From zero-day exploits to weaknesses in widely used software and hardware, the vulnerabilities uncovered last year underscore threat actors’ tactics and the critical gaps in organizational defenses. This roundup showcases the standout findings from 2024’s cybersecurity reports, highlighting critical risks and emerging threats that demand attention.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.