VulnerabilitycriticalExploited in the wild

Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency

The Hacker Newsby @TheHackersNewsMar 15, 2023 · 00:00 UTC (Mar 15, 2023)2 min read2

Read at thehackernews.com

Analyze CVE-2019-18935 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-18935 CVE-2017-11317 CVE-2017-11357

Tags: cve-2019-18935 cve-2017-11317 cve-2017-11357 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-11317 +1 related CVE CVE-2017-11357	Unrestricted File Upload / RCE in Progress Telerik UI for ASP.NET AJAX	9.8	84%	KEVPoC ×2	Aug 23, 2017 KEV Apr 11, 2022
CVE-2019-18935	Unauthenticated .NET Deserialization RCE in Progress Telerik UI for ASP.NET AJAX	9.8	100%	KEVRansomwarePoC ×4	Dec 11, 2019 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Mar 16, 2023 Cyber Attack / Vulnerability Multiple threat actors, including a nation-state group, exploited a critical three-year-old security flaw in Progress Telerik to break into an unnamed federal entity in the U. S.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.