Old vulnerabilities are still a big problem

Help Net Securityby @zeljkazorzSep 6, 2023 · 00:00 UTC (Sep 6, 2023)1 min read6

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Tags: cve-2017-11882 cve-2018-0802 cve-2017-0199 cve-2017-8570 cve-2012-0158 vulnerability

Vulnerabilities mentioned

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2012-0158	Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls)	—	100%	KEVRansomware	— KEV Nov 3, 2021
CVE-2012-0507	Type Confusion RCE in Oracle Java SE Concurrency Component	—	98%	KEVRansomware	— KEV Mar 3, 2022
CVE-2012-1723	Remote Arbitrary Code Execution in Oracle Java SE (Hotspot Component)	—	94%	KEVRansomware	— KEV Mar 3, 2022
CVE-2013-0074	Pointer-Validation RCE in Microsoft Silverlight (KEV-listed, EOL)	—	79%	KEVRansomware	— KEV May 25, 2022
CVE-2014-6271	Arbitrary Code Execution in GNU Bash (Shellshock)	—	100%	KEV	— KEV Jan 28, 2022
CVE-2017-0143	Remote Code Execution in Microsoft Windows SMBv1 (EternalBlue family)	8.8	93%	KEVRansomwarePoC ×5	Mar 17, 2017 KEV Nov 3, 2021
CVE-2017-0144 +1 related CVE CVE-2017-0145	Remote Code Execution in Microsoft SMBv1 (EternalBlue) affecting Windows and Siemens devices	8.8	99%	KEVRansomwarePoC ×6	Mar 17, 2017 KEV Feb 10, 2022
CVE-2017-0199	Remote Code Execution in Microsoft Office and WordPad via crafted document files	7.8	99%	KEVRansomwarePoC ×6	Apr 12, 2017 KEV Nov 3, 2021
CVE-2017-11882	Memory Corruption RCE in Microsoft Office via Legacy Equation Editor	7.8	100%	KEVRansomwarePoC ×10	Nov 15, 2017 KEV Nov 3, 2021
CVE-2017-8570	Remote Code Execution in Microsoft Office via Malicious PPSX Files (CVE-2017-8570)	7.8	90%	KEVPoC ×2	Jul 11, 2017 KEV Feb 25, 2022
CVE-2018-0802	Memory Corruption RCE in Microsoft Office Equation Editor	7.8	93%	KEVRansomwarePoC ×3	Jan 10, 2018 KEV Nov 3, 2021
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2018-8174	Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine	7.5	88%	KEVRansomwarePoC ×2	May 9, 2018 KEV Feb 15, 2022
CVE-2019-11510	Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN	10.0	100%	KEVRansomwarePoC ×2	May 8, 2019 KEV Nov 3, 2021
CVE-2019-2725	Unauthenticated Injection in Oracle WebLogic Web Services Enables RCE	9.8	100%	KEVRansomwarePoC	Apr 26, 2019 KEV Jan 10, 2022
CVE-2020-1472	Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers	5.5	99%	KEVRansomwarePoC	Aug 17, 2020 KEV Nov 3, 2021
CVE-2021-26084	Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability	9.8	100%	KEVRansomwarePoC	Aug 30, 2021 KEV Nov 3, 2021
CVE-2021-26855	Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)	9.1	100%	KEVRansomwarePoC ×4	Mar 3, 2021 KEV Nov 3, 2021
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021
CVE-2021-34473 +1 related CVE CVE-2021-34523	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021

From the original article

1 min read at helpnetsecurity.com

A recently flagged phishing campaign aimed at delivering the Agent Tesla RAT to unsuspecting users takes advantage of old vulnerabilities in Microsoft Office that allow remote code execution.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.