Vulnerabilityhigh

FileWave patches two vulnerabilities that impacted more than 1,000 orgs

The RecordJan 11, 2023 · 00:00 UTC (Jan 11, 2023)3 min read2 · 1 read

Read at therecord.media

Analyze CVE-2022-34907 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-34907 CVE-2022-34906 CVE-2022-1388

Tags: cve-2022-34907 cve-2022-34906 cve-2022-1388 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-1388	Unauthenticated RCE in F5 BIG-IP via Missing Authentication	9.8	100%	KEVRansomwarePoC ×4	May 5, 2022 KEV May 10, 2022
CVE-2022-34907 +1 related CVE CVE-2022-34906	An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2	9.8 group max	16%	PoC	Jul 25, 2022

From the original article

3 min read at therecord.media

Swiss device management company FileWave confirmed on Tuesday that two vulnerabilities in their platform have been patched after being discovered by researchers from Claroty’s Team82. The vulnerabilities – CVE-2022-34907 and CVE-2022-34906 – were found in FileWave’s mobile device management (MDM) system and affect thousands of companies that use the system.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.