Threat actorcritical

Russia-linked APT28 compromised Ubiquiti EdgeRouters to facilitate cyber operations

Security Affairsby @securityaffairsFeb 28, 2024 · 11:43 UTC (Feb 28, 2024)4 min read4

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-36260 CVE-2022-46169 CVE-2021-35394 CVE-2023-23397

Tags: cve-2021-36260 cve-2022-46169 cve-2021-35394 cve-2023-23397 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-35394	Remote Code Execution via Memory Corruption in Realtek Jungle SDK	9.8	100%	KEVPoC	Aug 16, 2021 KEV Dec 10, 2021
CVE-2021-36260	Unauthenticated Command Injection in Hikvision Device Web Server	9.8	100%	KEVPoC ×3	Sep 22, 2021 KEV Jan 10, 2022
CVE-2022-46169	Unauthenticated Command Injection in Cacti (CVE-2022-46169)	9.8	100%	KEVPoC	Dec 5, 2022 KEV Feb 16, 2023
CVE-2023-23397	Zero-Click Elevation of Privilege in Microsoft Outlook (Forced NTLM Credential Leak)	9.8	97%	KEV	Mar 14, 2023 KEV Mar 14, 2023

From the original article

4 min read at securityaffairs.com

Russian cyberspies are compromising Ubiquiti EdgeRouters to evade detection, warns a joint advisory published by authorities.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.