Officials once again warn defenders that Russian hackers are targeting network devices
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2008-4128 | Cross-Site Request Forgery in Cisco IOS 12.4 HTTP Management Interface | 8.1 | 34% | KEVPoC ×3 | KEV |
| CVE-2018-0171 | Unauthenticated RCE/DoS in Cisco IOS & IOS XE Smart Install | 9.8 | 99% | KEV | KEV |
From the original article
3 min read at cyberscoop.com
State-sponsored attackers are targeting critical infrastructure networks in defense, communications, energy, finance, government and health care. Russian state-sponsored hackers are breaking into critical infrastructure around the world by exploiting poorly configured and vulnerable networking devices, authorities from the United States and 12 additional countries said in a joint cybersecurity advisory Monday.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.