Vulnerabilityhigh

8220 Gang Exploiting Oracle WebLogic Server Vulnerability to Spread Malware

The Hacker Newsby @TheHackersNewsDec 19, 2023 · 06:58 UTC (Dec 19, 2023)1 min read1

Read at thehackernews.com

Analyze CVE-2020-14883 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-14883 CVE-2020-14882 CVE-2017-3506

Tags: cve-2020-14883 cve-2020-14882 cve-2017-3506 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-3506	Unauthenticated OS Command Injection in Oracle WebLogic Server	7.4	96%	KEV	Apr 24, 2017 KEV Jun 3, 2024
CVE-2020-14882 +1 related CVE CVE-2020-14883	Remote Code Execution in Oracle WebLogic Server	9.8 group max	100%	KEVPoC ×3	Oct 21, 2020 KEV Nov 3, 2021

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Dec 19, 2023 Cryptojacking / Cyber Threat The threat actors associated with the 8220 Gang have been observed exploiting a high-severity flaw in Oracle WebLogic Server to propagate their malware. The security shortcoming is CVE-2020-14883 (CVSS score: 7. 2), a remote code execution bug that could be exploited by authenticated attackers to take over susceptible servers.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.