Vulnerabilitycritical

Critical RCE Vulnerability Discovered in Popular Cobalt Strike Hacking Software

The Hacker Newsby @TheHackersNewsOct 19, 2022 · 06:29 UTC (Oct 19, 2022)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2022-42948 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-42948 CVE-2022-39197

Tags: cve-2022-42948 cve-2022-39197 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-39197	XSS in Fortra Cobalt Strike Teamserver Enables Remote Code Execution	6.1	44%	KEV	Sep 22, 2022 KEV Mar 30, 2023
CVE-2022-42948	HTML Injection RCE in Fortra (HelpSystems) Cobalt Strike UI	9.8	3%	KEV	Mar 24, 2023 KEV Mar 30, 2023

From the original article

2 min read at thehackernews.com

HelpSystems, the company behind the Cobalt Strike software platform, has released an out-of-band security update to address a remote code execution vulnerability that could allow an attacker to take control of targeted systems.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.