Exploit / PoCcriticalExploited in the wild

CISA adds IBM Aspera Faspex and Mitel MiVoice to Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsFeb 22, 2023 · 12:00 UTC (Feb 22, 2023)1 min read1

Read at securityaffairs.com

Analyze CVE-2022-47986 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-47986 CVE-2022-41223 CVE-2022-40765

Tags: cve-2022-47986 cve-2022-41223 cve-2022-40765 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-41223 +1 related CVE CVE-2022-40765	Authenticated Code Injection in Mitel MiVoice Connect Director (through 19.3)	6.8	11%	KEVRansomware	Nov 22, 2022 KEV Feb 21, 2023
CVE-2022-47986	YAML Deserialization RCE in IBM Aspera Faspex	9.8	100%	KEVRansomware	Feb 17, 2023 KEV Feb 21, 2023

From the original article

1 min read at securityaffairs.com

US CISA added actively exploited flaws in IBM Aspera Faspex and Mitel MiVoice to its Known Exploited Vulnerabilities Catalog. US CISA added the following actively exploited flaws to its Known Exploited Vulnerabilities Catalog : CVE-2022-47986 (CVSS score: 9. 8) – IBM Aspera Faspex Code Execution Vulnerability – A remote attacker can trigger the vulnerability to execute arbitrary code on the system.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.