Vulnerabilityhigh

CISA: Chinese Hackers Exploiting Unpatched Devices to Target U.S. Agencies

The Hacker Newsby @TheHackersNewsSep 15, 2020 · 00:00 UTC (Sep 15, 2020)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-5902 CVE-2019-19781 CVE-2019-11510 CVE-2020-0688

Tags: cve-2020-5902 cve-2019-19781 cve-2019-11510 cve-2020-0688 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-11510	Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN	10.0	100%	KEVRansomwarePoC ×2	May 8, 2019 KEV Nov 3, 2021
CVE-2019-19781	Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP	9.8	100%	KEVRansomware	Dec 27, 2019 KEV Nov 3, 2021
CVE-2020-0688	RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys	8.8	100%	KEVRansomwarePoC ×2	Feb 11, 2020 KEV Nov 3, 2021
CVE-2020-5902	Unauthenticated RCE via path traversal in F5 BIG-IP TMUI	9.8	100%	KEVRansomwarePoC ×8	Jul 1, 2020 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

The US Cybersecurity and Infrastructure Security Agency (CISA) issued a new advisory on Monday about a wave of cyberattacks carried by Chinese nation-state actors targeting US government agencies and private entities.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.