Vulnerabilityhigh

3CX compromise: More details about the breach, new PWA app released

Help Net Securityby @zeljkazorzApr 12, 2023 · 00:00 UTC (Apr 12, 2023)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2013-3900 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2013-3900 CVE-2021-45491

Tags: cve-2013-3900 cve-2021-45491 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2013-3900	Authenticode Signature Verification Flaw in Microsoft WinVerifyTrust (RCE)	5.5	45%	KEV	Dec 11, 2013 KEV Jan 10, 2022
CVE-2021-45491	3CX System through 2022-03-17 stores cleartext passwords in a database	6.5	<1%		Mar 28, 2022

From the original article

2 min read at helpnetsecurity.com

3CX has released an interim report about Mandiant’s findings related to the compromise the company suffered last month, which resulted in a supply chain attack targeting cryptocurrency companies.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.