New Findings Challenge Attribution in Denmark's Energy Sector Cyberattacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-9054 | Pre-Authentication OS Command Injection in Zyxel NAS Devices | 9.8 | 100% | KEVPoC | KEV |
| CVE-2022-30525 | OS Command Injection in Zyxel Firewalls Enables Remote Command Execution | 9.8 | 100% | KEVPoC ×3 | KEV |
| CVE-2023-27881 | A user could use the “Upload Resource” functionality to upload files to any location on the disk | 9.9 | <1% | ||
| CVE-2023-28771 | Unauthenticated OS Command Injection in Zyxel ATP, USG FLEX, VPN, and ZyWALL Firewalls | 9.8 | 99% | KEVPoC | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jan 14, 2024 Cyber Attack / Vulnerability The cyber attacks targeting the energy sector in Denmark last year may not have had the involvement of the Russia-linked Sandworm hacking group, new findings from Forescout show.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.