Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

Iran-linked APT Rocket Kitten exploited VMware bug in recent attacks

Security Affairsby @securityaffairs ()2 min read4 · 1 read
Read at securityaffairs.com
Analyze CVE-2022-22954 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2022-22954
Tags
cve-2022-22954vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-22954
Server-Side Template Injection RCE in VMware Workspace ONE Access and Identity Manager
9.8100%KEVRansomwarePoC
KEV

From the original article

2 min read at securityaffairs.com

The Iran-linked APT group Rocket Kitten has been observed exploiting a recently patched CVE-2022-22954 VMware flaw. Iran-linked Rocket Kitten APT group has been observed exploiting a recently patched CVE-2022-22954 VMware Workspace ONE Access flaw to deploy ‘Core Impact’ Backdoor. The CVE-2022-22954 vulnerability is a server-side template injection remote code execution issue, it was rated 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.