Data breachcriticalExploited in the wild

The most common exploit paths enterprises leave open for attackers

Help Net Securityby @zeljkazorzJun 9, 2022 · 00:00 UTC (Jun 9, 2022)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-42321 CVE-2021-31206 CVE-2021-26855 CVE-2021-34473

Tags: cve-2021-42321 cve-2021-31206 cve-2021-26855 cve-2021-34473 breach

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-26855	Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)	9.1	100%	KEVRansomwarePoC ×4	Mar 3, 2021 KEV Nov 3, 2021
CVE-2021-34473 +1 related CVE CVE-2021-31206	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-42321	Authenticated RCE via Insecure Deserialization in Microsoft Exchange Server	8.8	92%	KEVRansomwarePoC ×2	Nov 10, 2021 KEV Nov 17, 2021

From the original article

2 min read at helpnetsecurity.com

Exposed version control repositories, leaked secrets in public code repositories, a subdomain vulnerable to takover, exposed Amazon S3 buckets, and Microsoft Exchange Server servers vulnerable to CVE-2021-42321 exploitation are the most common exploit paths medium to large enterprises left open for attackers in Q1 2022, according to Mandiant.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.