Vulnerabilityhigh
US, UK, Australia issue joint advisory on today's top exploited vulnerabilities
- CVEs
- CVE-2019-19781CVE-2019-11510CVE-2018-13379CVE-2020-5902CVE-2020-15505CVE-2020-0688CVE-2019-3396CVE-2017-11882CVE-2019-11580CVE-2018-7600CVE-2019-18935CVE-2019-0604CVE-2020-0787CVE-2020-1472CVE-2021-26855CVE-2021-26857CVE-2021-26858CVE-2021-27065CVE-2021-22893CVE-2021-22894CVE-2021-22899CVE-2021-22900CVE-2021-27101CVE-2021-27102CVE-2021-27103CVE-2021-27104CVE-2021-21985CVE-2020-12812CVE-2019-5591
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11882 | Memory Corruption RCE in Microsoft Office via Legacy Equation Editor | 7.8 | 100% | KEVRansomwarePoC ×10 | KEV |
| CVE-2018-13379 | Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2018-7600 | Unauthenticated Remote Code Execution in Drupal Core (Drupalgeddon 2) | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2019-0604 | RCE in Microsoft SharePoint via Application Package Markup Validation Flaw | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-11580 | Unauthenticated RCE in Atlassian Crowd and Crowd Data Center | 9.8 | 95% | KEVRansomwarePoC | KEV |
| CVE-2019-18935 | Unauthenticated .NET Deserialization RCE in Progress Telerik UI for ASP.NET AJAX | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2019-19781 | Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-3396 | Server-Side Template Injection RCE in Atlassian Confluence Server and Data Center | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2019-5591 | Default-Configuration LDAP Impersonation in Fortinet FortiOS | 6.5 | 19% | KEVRansomware | KEV |
| CVE-2020-0688 | RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys | 8.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-0787 | Privilege Escalation in Microsoft Windows Background Intelligent Transfer Service (BITS) | 7.8 | 43% | KEVRansomwarePoC | KEV |
| CVE-2020-12812 | MFA Bypass via Username Case Change in Fortinet FortiOS SSL VPN | 9.8 | 45% | KEVRansomware | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
| CVE-2020-15505 | Unauthenticated Hessian Java Deserialization RCE in Ivanti MobileIron | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2020-5902 | Unauthenticated RCE via path traversal in F5 BIG-IP TMUI | 9.8 | 100% | KEVRansomwarePoC ×8 | KEV |
| CVE-2021-21985 | Remote Code Execution in VMware vCenter Server vSAN Health Check plug-in | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2021-22893 | Use-After-Free RCE in Ivanti Pulse Connect Secure License Services | 10.0 | 47% | KEVRansomware | KEV |
CVE-2021-22894+2 related CVEs | Authenticated Buffer Overflow RCE in Ivanti Pulse Connect Secure Collaboration Suite | 8.8 group max | 41% | KEV | KEV |
CVE-2021-26855+3 related CVEs | Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon) | 9.1 group max | 100% | KEVRansomwarePoC ×4 | KEV |
CVE-2021-27104+3 related CVEs | Unauthenticated OS Command Injection in Accellion FTA Admin Endpoints | 9.8 group max | 57% | KEVRansomware | KEV |
From the original article
2 min read at therecord.media
Cyber-security agencies from Australia, the UK, and the US have published a joint advisory today listing the most exploited security flaws throughout 2020 and 2021. Joint advisories were published today by the Australian Cyber Security Centre (ACSC) , the UK National Cyber Security Centre (NCSC) , the US Cybersecurity and Infrastructure Security Agency (CISA), and the US Federal Bureau of Investigation (FBI) .
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.