Vulnerabilitymedium

8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

The Hacker Newsby @TheHackersNewsJul 7, 2024 · 16:50 UTC (Jul 7, 2024)2 min read1

Read at thehackernews.com

Analyze CVE-2017-3506 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-3506 CVE-2023-21839

Tags: cve-2017-3506 cve-2023-21839 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-3506	Unauthenticated OS Command Injection in Oracle WebLogic Server	7.4	96%	KEV	Apr 24, 2017 KEV Jun 3, 2024
CVE-2023-21839	Unauthenticated Remote Code Execution in Oracle WebLogic Server via T3/IIOP	7.5	100%	KEVPoC	Jan 18, 2023 KEV May 1, 2023

From the original article

2 min read at thehackernews.com

Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.