RansomwarecriticalExploited in the wild

Security Affairs newsletter Round 417 by Pierluigi Paganini

Security Affairsby @securityaffairsApr 30, 2023 · 09:55 UTC (Apr 30, 2023)3 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-27350 CVE-2023-27524 CVE-2023-1389 CVE-2023-29552

Tags: cve-2023-27350 cve-2023-27524 cve-2023-1389 cve-2023-29552 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-1389	Command Injection in TP-Link Archer AX21 Router Allows Remote Code Execution	8.8	100%	KEVPoC ×2	Mar 15, 2023 KEV May 1, 2023
CVE-2023-27350	Authentication Bypass Leading to SYSTEM RCE in PaperCut MF/NG	9.8	100%	KEVRansomwarePoC ×3	Apr 20, 2023 KEV Apr 21, 2023
CVE-2023-27524	Insecure default SECRET_KEY in Apache Superset enables auth bypass and RCE	9.8	98%	KEVPoC ×2	Apr 24, 2023 KEV Jan 8, 2024
CVE-2023-29552	SLP DoS Amplification Flaw Affects VMware ESXi, SUSE Linux, NetApp	7.5	64%	KEVPoC ×2	Apr 25, 2023 KEV Nov 8, 2023

From the original article

3 min read at securityaffairs.com

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.