Vulnerabilitycritical

Norwegian Entities Targeted in Ongoing Attacks Exploiting Ivanti EPMM Vulnerability

The Hacker Newsby @TheHackersNewsAug 2, 2023 · 03:41 UTC (Aug 2, 2023)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2023-35078 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-35078 CVE-2023-35081

Tags: cve-2023-35078 cve-2023-35081 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-35078	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) Exposes PII	9.8	100%	KEVRansomwarePoC	Jul 25, 2023 KEV Jul 25, 2023
CVE-2023-35081	Authenticated Path Traversal in Ivanti Endpoint Manager Mobile (EPMM)	7.2	64%	KEV	Aug 3, 2023 KEV Jul 31, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Aug 02, 2023 Vulnerability / Cyber Attack Advanced persistent threat (APT) actors exploited a recently disclosed critical flaw impacting Ivanti Endpoint Manager Mobile (EPMM) as a zero-day since at least April 2023 in attacks directed against Norwegian entities, including a government network.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.