Vulnerabilityhigh

Chinese Groups Deploy New TTPs to Exploit Ivanti Vulnerabilities

Infosecurity Magazineby James CokerApr 5, 2024 · 15:00 UTC (Apr 5, 2024)4 min read3 · 1 read

Read at infosecurity-magazine.com

Analyze CVE-2023-46805 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-46805 CVE-2024-21887 CVE-2024-21893

Tags: cve-2023-46805 cve-2024-21887 cve-2024-21893 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-21887 +1 related CVE CVE-2023-46805	Command Injection RCE in Ivanti Connect Secure and Policy Secure	9.1 group max	100%	KEVRansomwarePoC	Jan 12, 2024 KEV Jan 10, 2024
CVE-2024-21893	SSRF in Ivanti Connect Secure, Policy Secure, and Neurons SAML Component	8.2	100%	KEVRansomware	Jan 31, 2024 KEV Jan 31, 2024

From the original article

4 min read at infosecurity-magazine.com

Chinese threat actors have developed new techniques to move laterally post-exploitation of Ivanti vulnerabilities, new research from Mandiant has revealed. Five suspected China-nexus espionage groups’ activity has been detailed by Mandiant in a blog post, dated April 4.

Infosecurity Magazine

By James Coker · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.