Exploit / PoCcritical
NSA details top 25 flaws exploited by China
- CVEs
- CVE-2019-11510CVE-2020-5902CVE-2019-19781CVE-2020-8193CVE-2020-8195CVE-2020-8196CVE-2019-0708CVE-2020-15505CVE-2020-1350CVE-2020-1472CVE-2019-1040CVE-2018-6789CVE-2020-0688CVE-2018-4939CVE-2015-4852CVE-2020-2555CVE-2019-3396CVE-2019-11580CVE-2020-10189CVE-2019-18935CVE-2020-0601CVE-2019-0803CVE-2017-6327CVE-2020-3118CVE-2020-8515
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-4852 | Deserialization RCE in Oracle WebLogic Server (CVE-2015-4852) | — | 95% | KEV | — KEV |
| CVE-2017-6327 | Input Validation RCE in Symantec Messaging Gateway | 8.8 | 36% | KEV | KEV |
| CVE-2018-4939 | Unauthenticated Deserialization RCE in Adobe ColdFusion | 9.8 | 62% | KEV | KEV |
| CVE-2018-6789 | Pre-auth Buffer Overflow RCE in Exim SMTP Listener | 9.8 | 82% | KEVRansomwarePoC ×4 | KEV |
| CVE-2019-0708 | Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep) | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2019-0803 | Local Privilege Escalation in Microsoft Win32k Kernel Component | 7.8 | 45% | KEVRansomware | KEV |
| CVE-2019-1040 | A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check)… | 5.3 | 48% | ||
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-11580 | Unauthenticated RCE in Atlassian Crowd and Crowd Data Center | 9.8 | 95% | KEVRansomwarePoC | KEV |
| CVE-2019-18935 | Unauthenticated .NET Deserialization RCE in Progress Telerik UI for ASP.NET AJAX | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2019-19781 | Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-3396 | Server-Side Template Injection RCE in Atlassian Confluence Server and Data Center | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2020-0601 | ECC Certificate Spoofing in Microsoft Windows CryptoAPI (Crypt32.dll) | 8.1 | 89% | KEV | KEV |
| CVE-2020-0688 | RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys | 8.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-10189 | Unauthenticated RCE in Zoho ManageEngine Desktop Central | 9.8 | 100% | KEVPoC ×3 | KEV |
| CVE-2020-1350 | Wormable Unauthenticated RCE in Microsoft Windows DNS Server | 10.0 | 97% | KEV | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
| CVE-2020-15505 | Unauthenticated Hessian Java Deserialization RCE in Ivanti MobileIron | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2020-2555 | Unauthenticated deserialization RCE in Oracle Coherence via T3 | 9.8 | 97% | KEVPoC ×3 | KEV |
| CVE-2020-3118 | Format String Vulnerability in Cisco IOS XR Discovery Protocol Allows Adjacent RCE | 8.8 | 12% | KEV | KEV |
| CVE-2020-5902 | Unauthenticated RCE via path traversal in F5 BIG-IP TMUI | 9.8 | 100% | KEVRansomwarePoC ×8 | KEV |
CVE-2020-8193+2 related CVEs | Unauthenticated Authorization Bypass in Citrix ADC, Gateway, and SD-WAN WANOP | 6.5 group max | 88% | KEVPoC | KEV |
| CVE-2020-8515 | Unauthenticated Command Injection RCE in DrayTek Vigor3900/2960/300B Routers | 9.8 | 100% | KEVPoC | KEV |
From the original article
4 min read at securityaffairs.com
The US National Security Agency (NSA) has shared the list of top 25 vulnerabilities exploited by Chinese state-sponsored hacking groups in attacks in the wild. The US National Security Agency (NSA) has published a report that includes details of the top 25 vulnerabilities that are currently being exploited by China-linked APT groups in attacks in the wild.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.