Vulnerabilitycritical

Critical RCE impacts popular post

Security Affairsby @securityaffairsOct 18, 2022 · 12:27 UTC (Oct 18, 2022)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2022-42948 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-42948 CVE-2022-39197

Tags: cve-2022-42948 cve-2022-39197 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-39197	XSS in Fortra Cobalt Strike Teamserver Enables Remote Code Execution	6.1	44%	KEV	Sep 22, 2022 KEV Mar 30, 2023
CVE-2022-42948	HTML Injection RCE in Fortra (HelpSystems) Cobalt Strike UI	9.8	3%	KEV	Mar 24, 2023 KEV Mar 30, 2023

From the original article

2 min read at securityaffairs.com

HelpSystems, the company that developed the Cobalt Strike platform, addressed a critical remote code execution vulnerability in its software. HelpSystems, the company that developed the commercial post-exploitation toolkit Cobalt Strike, addressed a critical remote code execution vulnerability, tracked as CVE-2022-42948, in its platform.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.