VulnerabilitycriticalExploited in the wild

CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities

The Hacker Newsby @TheHackersNewsOct 5, 2023 · 09:30 UTC (Oct 5, 2023)1 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-42793 CVE-2023-28229 CVE-2022-31460 CVE-2022-31459 CVE-2022-31461 CVE-2022-31462 CVE-2022-31463

Tags: cve-2023-42793 cve-2023-28229 cve-2022-31460 cve-2022-31459 cve-2022-31461 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-31462 +4 related CVEs CVE-2022-31460 CVE-2022-31463 CVE-2022-31461 CVE-2022-31459	Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth…	8.8 group max	<1%	PoC	Jun 2, 2022
CVE-2023-28229	Windows CNG Key Isolation Service Local Privilege Escalation (CVE-2023-28229)	7.0	2%	KEV	Apr 11, 2023 KEV Oct 4, 2023
CVE-2023-42793	Authentication bypass in JetBrains TeamCity enables unauthenticated RCE	9.8	100%	KEVRansomwarePoC ×2	Sep 19, 2023 KEV Oct 4, 2023

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Oct 05, 2023 Vulnerability / Cyber Attack The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws to its Known Exploited Vulnerabilities ( KEV ) catalog due to active exploitation, while removing five bugs from the list due to lack of adequate evidence.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.