Vulnerabilityhigh

U.S. Says Russian Hackers Stealing Sensitive Data from Defense Contractors

The Hacker Newsby @TheHackersNewsFeb 17, 2022 · 13:01 UTC (Feb 17, 2022)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2018-13379 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-13379 CVE-2020-0688 CVE-2020-17144

Tags: cve-2018-13379 cve-2020-0688 cve-2020-17144 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2020-0688	RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys	8.8	100%	KEVRansomwarePoC ×2	Feb 11, 2020 KEV Nov 3, 2021
CVE-2020-17144	Remote Code Execution in Microsoft Exchange Server via Cmdlet Argument Validation	8.4	37%	KEV	Dec 10, 2020 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

State-sponsored actors backed by the Russian government regularly targeted the networks of several U. S. cleared defense contractors (CDCs) to acquire proprietary documents and other confidential information pertaining to the country's defense and intelligence programs and capabilities.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.