AdvisorycriticalExploited in the wild

CISA Warns of Active Attacks Exploiting Fortra MFT, TerraMaster NAS, and Intel Driver Flaws

The Hacker Newsby @TheHackersNewsFeb 15, 2023 · 00:00 UTC (Feb 15, 2023)2 min read2

Read at thehackernews.com

Analyze CVE-2022-24990 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-24990 CVE-2015-2291 CVE-2023-0669

Tags: cve-2022-24990 cve-2015-2291 cve-2023-0669 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2015-2291	Input Validation DoS Flaw in Intel Ethernet Diagnostics Driver for Windows	7.8	16%	KEVRansomware	Aug 9, 2017 KEV Feb 10, 2023
CVE-2022-24990	Unauthenticated RCE via Admin Password Leak in TerraMaster TOS 4.2.29 and earlier	7.5	83%	KEVRansomwarePoC ×3	Feb 7, 2023 KEV Feb 10, 2023
CVE-2023-0669	Pre-Authentication Deserialization RCE in Fortra GoAnywhere MFT	7.2	100%	KEVRansomwarePoC ×3	Feb 6, 2023 KEV Feb 10, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Feb 11, 2023 Threat Response / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three flaws to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active abuse in the wild.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.