Vulnerabilitycritical

CISA Warning: Nation-State Hackers Exploit Fortinet and Zoho Vulnerabilities

The Hacker Newsby @TheHackersNewsSep 11, 2023 · 05:58 UTC (Sep 11, 2023)2 min read1

Read at thehackernews.com

Analyze CVE-2022-47966 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-47966 CVE-2022-42475 CVE-2021-44228

Tags: cve-2022-47966 cve-2022-42475 cve-2021-44228 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2022-42475	Unauthenticated Heap Overflow in Fortinet FortiOS/FortiProxy SSL-VPN (Critical RCE)	9.8	99%	KEVRansomwarePoC	Jan 2, 2023 KEV Dec 13, 2022
CVE-2022-47966	Unauthenticated SAML RCE in Zoho ManageEngine On-Premise Products	9.8	100%	KEVRansomwarePoC ×6	Jan 18, 2023 KEV Jan 23, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Sep 08, 2023 Endpoint Security / Exploit The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that multiple nation-state actors are exploiting security flaws in Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus to gain unauthorized access and establish persistence on compromised systems.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.