Exploit / PoChighExploited in the wild

CISA adds TP-Link, Apache, and Oracle bugs to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsMay 2, 2023 · 07:11 UTC (May 2, 2023)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-1389 CVE-2021-45046 CVE-2021-44228 CVE-2023-21839

Tags: cve-2023-1389 cve-2021-45046 cve-2021-44228 cve-2023-21839 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2021-45046	Remote Code Execution in Apache Log4j2 via Incomplete Log4Shell Fix	9.0	100%	KEVRansomwarePoC	Dec 14, 2021 KEV May 1, 2023
CVE-2023-1389	Command Injection in TP-Link Archer AX21 Router Allows Remote Code Execution	8.8	100%	KEVPoC ×2	Mar 15, 2023 KEV May 1, 2023
CVE-2023-21839	Unauthenticated Remote Code Execution in Oracle WebLogic Server via T3/IIOP	7.5	100%	KEVPoC	Jan 18, 2023 KEV May 1, 2023

From the original article

2 min read at securityaffairs.com

US Cybersecurity and Infrastructure Security Agency (CISA) added TP-Link, Apache, and Oracle vulnerabilities to its Known Exploited Vulnerabilities catalog. U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.