Ransomware gangs are exploiting IBM Aspera Faspex RCE flaw (CVE-2022-47986)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-47986 | YAML Deserialization RCE in IBM Aspera Faspex | 9.8 | 100% | KEVRansomware | KEV |
From the original article
1 min read at helpnetsecurity.com
Attackers are exploiting a critical vulnerability (CVE-2022-47986) in the IBM Aspera Faspex centralized file transfer solution to breach organizations. IBM Aspera Faspex is used by organizations to allow employees to quickly and securely exchange files with each other. (The files are uploaded to and downloaded from a centralized Aspera transfer server.)
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.