Vulnerabilityhigh

CISA Warns of Hackers Exploiting Multiple Vulnerabilities in the Zimbra Collaboration Suite

Infosecurity Magazineby Alessandro MascellinoAug 17, 2022 · 17:30 UTC (Aug 17, 2022)1 min read1

Read at infosecurity-magazine.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-27924 CVE-2022-27925 CVE-2022-37042 CVE-2022-30333 CVE-2022-24682

Tags: cve-2022-27924 cve-2022-27925 cve-2022-37042 cve-2022-30333 cve-2022-24682 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-24682	Cross-Site Scripting in Synacor Zimbra Collaboration Suite Calendar	6.1	31%	KEVRansomwarePoC	Feb 9, 2022 KEV Feb 25, 2022
CVE-2022-27924 +1 related CVE CVE-2022-27925	Unauthenticated Memcache Command Injection in Synacor Zimbra Collaboration Suite	7.5 group max	94%	KEVRansomware	Apr 21, 2022 KEV Aug 4, 2022
CVE-2022-30333	Directory Traversal in RARLAB UnRAR (Linux/UNIX) Enables Arbitrary File Writes	7.5	99%	KEVRansomwarePoC ×2	May 9, 2022 KEV Aug 9, 2022
CVE-2022-37042	Unauthenticated ZIP Path Traversal RCE in Synacor Zimbra Collaboration Suite	9.8	92%	KEVRansomwarePoC	Aug 12, 2022 KEV Aug 11, 2022

From the original article

1 min read at infosecurity-magazine.com

The Cybersecurity and Infrastructure Security Agency (CISA) has published a new advisory warning of threat actors actively exploiting five different vulnerabilities in the Zimbra Collaboration Suite (ZCS).

Infosecurity Magazine

By Alessandro Mascellino · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.