Policy & legalcritical
Week in review: Two Cisco ASA zero-days exploited, MITRE breach, GISEC Global 2024
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-38028 | Local Privilege Escalation in Microsoft Windows Print Spooler (CVE-2022-38028) | 7.8 | 15% | KEV | KEV |
CVE-2024-21887+1 related CVE | Command Injection RCE in Ivanti Connect Secure and Policy Secure | 9.1 group max | 100% | KEVRansomwarePoC | KEV |
CVE-2024-20353+1 related CVE | Unauthenticated Device-Reload DoS in Cisco ASA and FTD Web Servers | 8.6 group max | 70% | KEVPoC | KEV |
| CVE-2024-2389 | In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified | 9.8 | 93% | ||
| CVE-2024-4040 | Unauthenticated Sandbox Escape and RCE in CrushFTP (CVE-2024-4040) | 10.0 | 100% | KEVPoC ×2 | KEV |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359) A state-sponsored threat actor has managed to compromise Cisco Adaptive Security Appliances (ASA) used on government networks across the globe and use two zero-day vulnerabilities (CVE-2024-20353, CVE-2024-20359) to install…
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.