RansomwarecriticalExploited in the wild

U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet Flaws

The Hacker Newsby @TheHackersNewsNov 22, 2021 · 07:14 UTC (Nov 22, 2021)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-34473 CVE-2020-12812 CVE-2019-5591 CVE-2018-13379

Tags: cve-2021-34473 cve-2020-12812 cve-2019-5591 cve-2018-13379 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2019-5591	Default-Configuration LDAP Impersonation in Fortinet FortiOS	6.5	19%	KEVRansomware	Aug 14, 2020 KEV Nov 3, 2021
CVE-2020-12812	MFA Bypass via Username Case Change in Fortinet FortiOS SSL VPN	9.8	45%	KEVRansomware	Jul 24, 2020 KEV Nov 3, 2021
CVE-2021-34473	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

Cybersecurity agencies from Australia, the U. K. , and the U.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.