Ransomwarehigh
Hackers Targeted Work-From-Home Technology and Avoided Adobe Products Last Year
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-19781 | Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2020-0674 | Use-After-Free RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 87% | KEVPoC ×4 | KEV |
| CVE-2020-0796 | Unauthenticated RCE in Microsoft SMBv3 (SMBGhost) | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
| CVE-2020-14882 | Remote Code Execution in Oracle WebLogic Server | 9.8 | 100% | KEVPoC ×3 | KEV |
From the original article
3 min read at therecord.media
In 2015, eight of the top ten most exploited vulnerabilities involved Adobe products. But in 2020, no Adobe products made the list, according to new data. Instead, cybercriminals focused their attention on vulnerabilities in remote-work technology, such as Citrix’s Application Delivery Controller, PulseSecure’s Pulse Connect, and Oracle’s WebLogic, as well as widely-used Microsoft products.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.