Malwarehigh

CISA analyzed malware found on compromised Pulse Secure devices

Security Affairsby @securityaffairsJul 22, 2021 · 12:39 UTC (Jul 22, 2021)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-11510 CVE-2020-8260 CVE-2020-8243 CVE-2021-2289

Tags: cve-2019-11510 cve-2020-8260 cve-2020-8243 cve-2021-2289 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-11510	Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN	10.0	100%	KEVRansomwarePoC ×2	May 8, 2019 KEV Nov 3, 2021
CVE-2020-8243	Authenticated Arbitrary Code Execution via Template Upload in Ivanti Pulse Connect Secure	7.2	91%	KEV	Sep 30, 2020 KEV Nov 3, 2021
CVE-2020-8260	Authenticated RCE in Ivanti Pulse Connect Secure admin web interface (pre-9.1R9)	7.2	96%	KEVPoC	Oct 28, 2020 KEV Nov 3, 2021
CVE-2021-2289	Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component	8.1	15%		Apr 22, 2021

From the original article

2 min read at securityaffairs.com

U. S. CISA released an alert today about several stealth malware samples that were found on compromised Pulse Secure devices.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.