Vulnerabilitycritical

Microsoft accuses China of abusing vulnerability disclosure requirements

The RecordDec 22, 2022 · 00:00 UTC (Dec 22, 2022)4 min read2 · 1 read

Read at therecord.media

Analyze CVE-2021-35211 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-35211 CVE-2021-42321 CVE-2022-26134

Tags: cve-2021-35211 cve-2021-42321 cve-2022-26134 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-35211	Unauthenticated RCE (Remote Memory Escape) in SolarWinds Serv-U	10.0	91%	KEVRansomware	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-42321	Authenticated RCE via Insecure Deserialization in Microsoft Exchange Server	8.8	92%	KEVRansomwarePoC ×2	Nov 10, 2021 KEV Nov 17, 2021
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022

From the original article

4 min read at therecord.media

Microsoft on Friday accused state-backed hackers in China of abusing the country’s vulnerability disclosure requirements in an effort to discover and develop zero-day exploits. In July 2021 , the Cyberspace Administration of China (CAC) issued stricter rules around disclosing vulnerabilities for companies operating within its borders.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.