VulnerabilityhighExploited in the wild

CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September

The Hacker Newsby @TheHackersNewsAug 24, 2024 · 07:03 UTC (Aug 24, 2024)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-39717 CVE-2021-33044 CVE-2021-33045 CVE-2021-31196 CVE-2022-0185

Tags: cve-2024-39717 cve-2021-33044 cve-2021-33045 cve-2021-31196 cve-2022-0185 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-31196	Information Disclosure in Microsoft Exchange Server Exploited in the Wild	7.2	54%	KEV	Jul 14, 2021 KEV Aug 21, 2024
CVE-2021-33044 +1 related CVE CVE-2021-33045	Authentication Bypass in Dahua IP Camera Firmware	9.8	100%	KEVPoC ×2	Sep 15, 2021 KEV Aug 21, 2024
CVE-2022-0185	Heap-Based Buffer Overflow in Linux Kernel Filesystem Context API	8.4	25%	KEVPoC ×2	Feb 11, 2022 KEV Aug 21, 2024
CVE-2024-39717	Unrestricted File Upload in Versa Networks Versa Director Exploited by Volt Typhoon	7.2	4%	KEV	Aug 22, 2024 KEV Aug 23, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Aug 24, 2024 Vulnerability / Government Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has placed a security flaw impacting Versa Director to its Known Exploited Vulnerabilities ( KEV ) catalog based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.