Exploit / PoChighExploited in the wild

CISA adds Sophos Web Appliance bug to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsNov 22, 2023 · 09:48 UTC (Nov 22, 2023)1 min read3

Read at securityaffairs.com

Analyze CVE-2023-36584 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-36584 CVE-2023-1671 CVE-2023-2551

Tags: cve-2023-36584 cve-2023-1671 cve-2023-2551 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-1671	Command Injection RCE in Sophos Web Appliance Warn-Proceed Handler	9.8	100%	KEVPoC	Apr 4, 2023 KEV Nov 16, 2023
CVE-2023-2551	PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1	8.8	2%	PoC	May 5, 2023
CVE-2023-36584	Mark of the Web (MOTW) Security Feature Bypass in Microsoft Windows	5.4	3%	KEV	Oct 10, 2023 KEV Nov 16, 2023

From the original article

1 min read at securityaffairs.com

US CISA added three new vulnerabilities (tracked as CVE-2023-36584 , CVE-2023-1671 , and CVE-2023-2551 ) to its Known Exploited Vulnerabilities catalog. The U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.