Ransomwarecritical

Unknown ransomware gang uses SQL injection bug in BillQuick Web Suite to deploy ransomware

Security Affairsby @securityaffairsOct 25, 2021 · 21:13 UTC (Oct 25, 2021)2 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-42258 CVE-2021-42344 CVE-2021-42345 CVE-2021-42346 CVE-2021-42571 CVE-2021-42572 CVE-2021-42573 CVE-2021-42741 CVE-2021-42742

Tags: cve-2021-42258 cve-2021-42344 cve-2021-42345 cve-2021-42346 cve-2021-42571 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-42258	Unauthenticated SQL Injection RCE in BQE BillQuick Web Suite	9.8	75%	KEVRansomwarePoC	Oct 22, 2021 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

An unknown ransomware gang leverages a critical SQL injection flaw in the BillQuick Web Suite time and billing solution to deploy ransomware. An unknown ransomware gang is exploiting a critical SQL injection flaw, tracked as CVE-2021-42258 , in the popular billing software suite BillQuick Web Suite time to deploy ransomware.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.