Vulnerabilitymedium

Cryptocurrency mining operations target Windows Server, Redis and Apache Solr servers online

Security Affairsby @securityaffairsMar 12, 2018 · 07:28 UTC (Mar 12, 2018)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2017-9805 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-9805 CVE-2017-12629

Tags: cve-2017-9805 cve-2017-12629 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-12629	Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener…	9.8	92%	PoC ×2	Oct 14, 2017
CVE-2017-9805	XML Deserialization RCE in Apache Struts 2 REST Plugin	8.1	99%	KEVPoC	Sep 15, 2017 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

Researchers from the ISC SANS group and the Anti-DDoS company Imperva discovered two distinct campaigns targeting Windows Server, Redis and Apache Solr servers online. Last week new mining campaigns targeted unpatched Windows Server, Apache Solr, and Redis servers, attackers attempted to install the cryptocurrency miner Coinminer .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.