Ransomwarehigh
The Satan Ransomware adds new exploits to its arsenal
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-0738 | Authentication Bypass via HTTP Verb Tampering in Red Hat JBoss JMX-Console | 5.3 | 74% | KEVRansomwarePoC | KEV |
| CVE-2015-1427 | Sandbox Bypass RCE in Elasticsearch Groovy Scripting Engine | — | 100% | KEV | — KEV |
| CVE-2017-10271 | Unauthenticated Remote Code Execution in Oracle WebLogic Server | 7.5 | 100% | KEVRansomwarePoC ×3 | KEV |
| CVE-2017-12615 | Unauthenticated RCE in Apache Tomcat 7 on Windows via HTTP PUT (CVE-2017-12615) | 8.1 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2017-8046 | Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot… | 9.8 | 75% | ||
| CVE-2018-1273 | Unauthenticated RCE in VMware Tanzu Spring Data Commons | 9.8 | 97% | KEVRansomware | KEV |
| CVE-2018-2894 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent | 9.8 | 50% |
From the original article
3 min read at securityaffairs.com
A variant of the Satan ransomware recently observed includes exploits to its arsenal and targets machines leveraging additional flaws. Experts at FortiGuard Labs have discovered a new variant of the Satan ransomware that includes new exploits to its portfolio and leverages additional vulnerabilities to infect as many machines as possible.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.