Network Attack Trends: February
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-21315 | Command Injection in systeminformation npm Package (CVE-2021-21315) | 7.8 | 91% | KEV | KEV |
| CVE-2021-21975 | SSRF in VMware vRealize Operations Manager API Enables Admin Credential Theft | 7.5 | 78% | KEVRansomwarePoC | KEV |
| CVE-2021-22986 | Unauthenticated RCE in F5 BIG-IP and BIG-IQ iControl REST | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2021-22991 | Buffer Overflow in F5 BIG-IP Traffic Management Microkernel (TMM) | 9.8 | 62% | KEV | KEV |
CVE-2021-25298+2 related CVEs | Authenticated OS Command Injection in Nagios XI 5.7.5 Cloud-VM Config Wizard | 8.8 | 74% | KEVPoC ×4 | KEV |
From the original article
9 min read at unit42.paloaltonetworks.com
Unit 42 researchers observed network attack trends, February-April 2021. In the following sections, we present our analysis of the most recently published vulnerabilities, including the severity and category. Additionally, we provide insight into how the vulnerabilities are actively exploited in the wild based on real-world data collected from Palo Alto Networks Next-Generation Firewalls .
By Yue Guan, Lei Xu, Vaibhav Singhal, Brock Mammen · unit42.paloaltonetworks.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.