Vulnerabilitycritical
Attackers Chaining Zerologon with VPN Exploits
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-13379 | Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-19781 | Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
| CVE-2020-15505 | Unauthenticated Hessian Java Deserialization RCE in Ivanti MobileIron | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2020-1631 | Unauthenticated Path Traversal/LFI in Juniper Junos OS HTTP/HTTPS Service | 9.8 | 5% | KEV | KEV |
| CVE-2020-2021 | SAML Authentication Bypass in Palo Alto Networks PAN-OS | 10.0 | 4% | KEVRansomware | KEV |
From the original article
1 min read at infosecurity-magazine.com
The US government has warned of newly discovered APT attacks combining exploits of VPN products with those for the recently disclosed Zerologon bug. The joint alert from the FBI and Cybersecurity and Infrastructure Security Agency (CISA) revealed that government and non-government targets are being attacked in this campaign.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.