Vulnerabilityhigh
HelpSystems Patch Falls Short, RCE Vulnerability in Cobalt Strike Remains
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-39197 | XSS in Fortra Cobalt Strike Teamserver Enables Remote Code Execution | 6.1 | 44% | KEV | KEV |
| CVE-2022-42948 | HTML Injection RCE in Fortra (HelpSystems) Cobalt Strike UI | 9.8 | 3% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
A remote code execution (RCE) vulnerability has been discovered in Cobalt Strike software, potentially allowing threat actors to take control of targeted systems. At a basic level, Cobalt Strike is a red-team framework primarily used for adversary simulation.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.