Vulnerabilitycritical

Hackers targeting Drupal vulnerabilities to install the Shellbot Backdoor

Security Affairsby @securityaffairsOct 12, 2018 · 11:21 UTC (Oct 12, 2018)1 min read3

Read at securityaffairs.com

Analyze CVE-2018-7600 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-7600 CVE-2018-7602 CVE-2017-5638

Tags: cve-2018-7600 cve-2018-7602 cve-2017-5638 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-5638	Unauthenticated RCE in Apache Struts Jakarta Multipart parser	9.8	100%	KEVRansomwarePoC ×10	Mar 11, 2017 KEV Nov 3, 2021
CVE-2018-7600	Unauthenticated Remote Code Execution in Drupal Core (Drupalgeddon 2)	9.8	100%	KEVRansomwarePoC ×4	Mar 29, 2018 KEV Nov 3, 2021
CVE-2018-7602	Drupal Core Remote Code Execution Vulnerability	9.8	99%	KEVRansomwarePoC ×2	Jul 19, 2018 KEV Apr 13, 2022

From the original article

1 min read at securityaffairs.com

A group of hackers is targeting Drupal vulnerabilities, including Drupalgeddon2, patched earlier this year to install a backdoor on compromised servers. Security experts from IBM are targeting Drupal vulnerabilities, including the CVE-2018-7600 and CVE-2018-7602 flaws, aka Drupalgeddon2 and Drupalgeddon3 , to install a backdoor on the infected systems and tack full control of the hosted platforms.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.