Vulnerabilityhigh
Web-based DNA sequencers getting compromised through old, unpatched flaw
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-6526 | dnaTools dnaLIMS 4-2015s13: DnaLIMS is vulnerable to unauthenticated command execution through an improperly protected administrative web shell… | 9.8 | 57% | PoC |
From the original article
2 min read at helpnetsecurity.com
Unknown attackers are trying to exploit a vulnerability in dnaLIMS, a Web based bioinformatics laboratory information management system, to implant a bind shell into the underlying web server. Researcher Ankit Anubhav first noticed the attacks on June 12 and they are apparently still going on. DnaLIMS is developed by Colorado-based dnaTools.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.