Vulnerabilityhigh

Panda Emissary APT specialized in defence aerospace projects

Security Affairsby @securityaffairsJun 13, 2018 · 20:38 UTC (Jun 13, 2018)3 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2011-3544 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2011-3544 CVE-2010-0738

Tags: cve-2011-3544 cve-2010-0738 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2010-0738	Authentication Bypass via HTTP Verb Tampering in Red Hat JBoss JMX-Console	5.3	74%	KEVRansomwarePoC	Apr 28, 2010 KEV May 25, 2022
CVE-2011-3544	Remote Code Execution in Oracle Java SE JRE Applet Rhino Script Engine	—	97%	KEV	— KEV Mar 3, 2022

From the original article

3 min read at securityaffairs.com

The Panda Emissary group extensively uses long-running strategic web compromises and relies on whitelists to syphon defence aerospace projects from victims. An alleged Chinese APT group dubbed Panda Emissary (also known as TG-3390) is targeting high-profile governments and organisations searching for defense aerospace projects.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.