Vulnerabilitycritical
UK NCSC agency warns of APTs exploiting Enterprise VPN vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-13379 | Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2018-13382 | Unauthenticated SSL VPN Account-Takeover Flaw in Fortinet FortiOS and FortiProxy | 7.5 | 82% | KEVRansomware | KEV |
| CVE-2018-13383 | Out-of-Bounds Write in Fortinet FortiOS and FortiProxy SSL VPN Web Service | 6.5 | 32% | KEVRansomware | KEV |
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-11539 | Authenticated Command Injection in Ivanti Pulse Connect Secure and Policy Secure | 7.2 | 99% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-1579 | Format String RCE in Palo Alto Networks PAN-OS GlobalProtect Portal/Gateway | 8.1 | 44% | KEVRansomwarePoC | KEV |
From the original article
2 min read at securityaffairs.com
The UK’s National Cyber Security Centre (NCSC) warns of attacks exploiting recently disclosed VPN vulnerabilities in Fortinet, Palo Alto Networks and Pulse Secure According to the UK’s National Cyber Security Centre (NCSC), advanced persistent threat (APT) groups have been exploiting recently disclosed VPN vulnerabilities in enterprise VPN products in attacks in the wild.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.