Vulnerabilitycritical
Russia-linked APT exploited at least 3 Exim flaws in recent attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-10149 | Unvalidated Email Recipient Enables Remote Command Execution in Exim MTA | 9.8 | 100% | KEVPoC ×5 | KEV |
| CVE-2019-15846 | Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash | 9.8 | 36% | ||
| CVE-2019-16928 | Exim Out-of-bounds Write Vulnerability | 9.8 | 42% | KEVPoC ×2 | KEV |
From the original article
2 min read at securityaffairs.com
Several flaws in the Exim mail transfer agent (MTA) have been exploited by Russia-linked hackers, hundreds of thousands of servers are still unpatched. Russia-linked threat actors have exploited several vulnerabilities in the Exim mail transfer agent (MTA) in their campaigns. Last week, the U.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.