Malwarecritical

Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List

The Hacker Newsby @TheHackersNewsJul 25, 2019 · 11:08 UTC (Jul 25, 2019)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-11581 CVE-2019-10149 CVE-2019-0192 CVE-2018-1000861 CVE-2019-7238 CVE-2016-3088

Tags: cve-2019-11581 cve-2019-10149 cve-2019-0192 cve-2018-1000861 cve-2019-7238 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2016-3088	Unauthenticated Arbitrary File Upload Leading to RCE in Apache ActiveMQ Fileserver	9.8	99%	KEVPoC	Jun 1, 2016 KEV Feb 10, 2022
CVE-2018-1000861	Unauthenticated RCE in Jenkins Stapler Web Framework via Crafted URLs	9.8	98%	KEV	Dec 10, 2018 KEV Feb 10, 2022
CVE-2019-0192	In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request	9.8	78%		Mar 7, 2019
CVE-2019-10149	Unvalidated Email Recipient Enables Remote Command Execution in Exim MTA	9.8	100%	KEVPoC ×5	Jun 5, 2019 KEV Jan 10, 2022
CVE-2019-11581	Unauthenticated SSTI RCE in Atlassian Jira Server and Data Center	9.8	85%	KEV	Aug 9, 2019 KEV Mar 7, 2022
CVE-2019-7238	Incorrect Access Control in Sonatype Nexus Repository Manager before 3.15.0	9.8	77%	KEV	Mar 21, 2019 KEV Dec 10, 2021

From the original article

2 min read at thehackernews.com

Cybersecurity researchers have discovered a new variant of WatchBog , a Linux-based cryptocurrency mining malware botnet, which now also includes a module to scan the Internet for Windows RDP servers vulnerable to the Bluekeep flaw .

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.