VulnerabilitycriticalExploited in the wild

CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability

The Hacker Newsby @TheHackersNewsApr 6, 2022 · 03:27 UTC (Apr 6, 2022)2 min read4

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-22965 CVE-2022-22674 CVE-2022-22675 CVE-2021-45382

Tags: cve-2022-22965 cve-2022-22674 cve-2022-22675 cve-2021-45382 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-45382	Command Injection RCE in D-Link DIR-810L/820L/826L/830L/836L Routers	9.8	98%	KEVPoC	Feb 17, 2022 KEV Apr 4, 2022
CVE-2022-22675 +1 related CVE CVE-2022-22674	Out-of-Bounds Write in Apple macOS/iOS Kernel Allows Arbitrary Code Execution	7.8 group max	12%	KEV	May 26, 2022 KEV Apr 4, 2022
CVE-2022-22965	Unauthenticated RCE in VMware Spring Framework (Spring4Shell) - JDK 9+ Tomcat WARs	9.8	100%	KEVPoC	Apr 1, 2022 KEV Apr 4, 2022

From the original article

2 min read at thehackernews.com

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added the recently disclosed remote code execution (RCE) vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on "evidence of active exploitation."

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.