VulnerabilityhighExploited in the wild

Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected

The Hacker Newsby @TheHackersNewsMay 3, 2023 · 04:08 UTC (May 3, 2023)2 min read3

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-1389 CVE-2021-45046 CVE-2023-21839 CVE-2021-44228

Tags: cve-2023-1389 cve-2021-45046 cve-2023-21839 cve-2021-44228 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2021-45046	Remote Code Execution in Apache Log4j2 via Incomplete Log4Shell Fix	9.0	100%	KEVRansomwarePoC	Dec 14, 2021 KEV May 1, 2023
CVE-2023-1389	Command Injection in TP-Link Archer AX21 Router Allows Remote Code Execution	8.8	100%	KEVPoC ×2	Mar 15, 2023 KEV May 1, 2023
CVE-2023-21839	Unauthenticated Remote Code Execution in Oracle WebLogic Server via T3/IIOP	7.5	100%	KEVPoC	Jan 18, 2023 KEV May 1, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  May 02, 2023 Vulnerability / Cyber Threat The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added three flaws to the Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.