Exploit / PoCcriticalExploited in the wild

VMware NSX Manager bugs actively exploited in the wild

Security Affairsby @securityaffairsMar 8, 2023 · 07:37 UTC (Mar 8, 2023)2 min read5 · 1 read

Read at securityaffairs.com

Analyze CVE-2021-39144 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-39144 CVE-2022-31678

Tags: cve-2021-39144 cve-2022-31678 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-39144	Deserialization RCE in XStream XML Library Affecting Multiple Vendors	8.5	98%	KEVPoC ×2	Aug 23, 2021 KEV Mar 10, 2023
CVE-2022-31678	VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability	9.1	9%		Oct 28, 2022

From the original article

2 min read at securityaffairs.com

Security researchers warn of hacking attempts in the wild exploiting critical vulnerabilities in VMware NSX Manager. Cyber security firm Wallarm is warning of ongoing attacks exploiting the critical flaws, tracked as CVE-2021-39144 (CVSS score of 9. 8) and CVE-2022-31678 (CVSS score of 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.