Exploited: Cisco, SharePoint, Chrome vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-20377 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a… | 5.4 | <1% | ||
CVE-2024-20387+1 related CVE | A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in… | 5.4 group max | <1% | ||
| CVE-2024-20481 | Unauthenticated Remote Access VPN DoS in Cisco ASA and FTD Software | 5.8 | 16% | KEV | KEV |
| CVE-2024-38094 | Authenticated deserialization RCE in Microsoft SharePoint Server | 7.2 | 51% | KEVRansomware | KEV |
| CVE-2024-4947 | V8 Type Confusion in Google Chrome Actively Exploited by Lazarus Group | 9.6 | 15% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | detankzone.com | the Google Chrome web browser originating from the website detankzone[.]com,” the researchers explained . “On the surface, this websi |
From the original article
3 min read at helpnetsecurity.com
Threat actors have been leveraging zero and n-day vulnerabilities in Cisco security appliances (CVE-2024-20481), Microsoft Sharepoint (CVE-2024-38094), and Google’s Chrome browser (CVE-2024-4947). In the past few days, Cisco has released fixes for a slew of vulnerabilities affecting the software powering its security appliances.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.