Exploit / PoChigh

Chinese government hacker exploiting ScreenConnect, F5 bugs to attack defense and government entities

The RecordMar 21, 2024 · 20:48 UTC (Mar 21, 2024)3 min read3 · 1 read

Read at therecord.media

Analyze CVE-2024-1709 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-1709 CVE-2023-46747

Tags: cve-2024-1709 cve-2023-46747 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-46747	F5 BIG-IP TMUI Authentication Bypass Enables Unauthenticated RCE	9.8	97%	KEVRansomwarePoC ×2	Oct 26, 2023 KEV Oct 31, 2023
CVE-2024-1709	Authentication Bypass in ConnectWise ScreenConnect Creates Rogue Admin Accounts	10.0	100%	KEVRansomwarePoC ×3	Feb 21, 2024 KEV Feb 22, 2024

From the original article

3 min read at therecord.media

A hacker allegedly connected to the People's Republic of China has been exploiting two popular vulnerabilities to attack U. S. defense contractors, U.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.