Exploit / PoCcritical
Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-47246 | Unauthenticated Path Traversal RCE in SysAid On-Premise Server | 9.8 | 99% | KEVRansomwarePoC | KEV |
From the original article
2 min read at thehackernews.com
The threat actor known as Lace Tempest has been linked to the exploitation of a zero-day flaw in SysAid IT support software in limited attacks, according to new findings from Microsoft. Lace Tempest, which is known for distributing the Cl0p ransomware, has in the past leveraged zero-day flaws in MOVEit Transfer and PaperCut servers .
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.