Exploit / PoCcriticalExploited in the wild

CISA adds Fortra MFT, TerraMaster NAS, Intel driver Flaws, to its Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsFeb 11, 2023 · 10:35 UTC (Feb 11, 2023)1 min read2

Read at securityaffairs.com

Analyze CVE-2023-0669 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-0669 CVE-2015-2291 CVE-2022-24990

Tags: cve-2023-0669 cve-2015-2291 cve-2022-24990 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2015-2291	Input Validation DoS Flaw in Intel Ethernet Diagnostics Driver for Windows	7.8	16%	KEVRansomware	Aug 9, 2017 KEV Feb 10, 2023
CVE-2022-24990	Unauthenticated RCE via Admin Password Leak in TerraMaster TOS 4.2.29 and earlier	7.5	83%	KEVRansomwarePoC ×3	Feb 7, 2023 KEV Feb 10, 2023
CVE-2023-0669	Pre-Authentication Deserialization RCE in Fortra GoAnywhere MFT	7.2	100%	KEVRansomwarePoC ×3	Feb 6, 2023 KEV Feb 10, 2023

From the original article

1 min read at securityaffairs.com

US CISA added actively exploited flaws in Fortra MFT, Intel driver, and TerraMaster NAS to its Known Exploited Vulnerabilities Catalog. US CISA added actively exploited flaws in Fortra MFT, Intel driver, and TerraMaster NAS, respectively tracked as CVE-2023-0669 , CVE-2015-2291 , and CVE-2022-24990 , to its Known Exploited Vulnerabilities Catalog . The CVE-2015-2291 flaw (CVSS v3 score 7.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.