Vulnerabilityhigh

Cyber espionage - China-Linked group leverages recently patched .NET Flaw

Security Affairsby @securityaffairsOct 19, 2017 · 07:53 UTC (Oct 19, 2017)3 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2017-8759 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-8759 CVE-2017-0199

Tags: cve-2017-8759 cve-2017-0199 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-0199	Remote Code Execution in Microsoft Office and WordPad via crafted document files	7.8	99%	KEVRansomwarePoC ×6	Apr 12, 2017 KEV Nov 3, 2021
CVE-2017-8759	Remote Code Execution in Microsoft .NET Framework via Malicious Documents (CWE-94)	7.8	89%	KEVPoC ×2	Sep 13, 2017 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

Security researchers at Proofpoint spotted a cyber espionage campaign conducted by a group previously linked to China. The hackers have been using a recently patched . NET vulnerability, tracked as CVE-2017-8759, in attacks aimed at organizations in the United States.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.