Exploit / PoCcritical

Microsoft Warns of Uptick in Hackers Leveraging Publicly-Disclosed 0

The Hacker Newsby @TheHackersNewsDec 14, 2022 · 04:04 UTC (Dec 14, 2022)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-35211 CVE-2021-40539 CVE-2021-44077 CVE-2021-42321 CVE-2022-26134

Tags: cve-2021-35211 cve-2021-40539 cve-2021-44077 cve-2021-42321 cve-2022-26134 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-35211	Unauthenticated RCE (Remote Memory Escape) in SolarWinds Serv-U	10.0	91%	KEVRansomware	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-40539	Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus	9.8	99%	KEVRansomwarePoC	Sep 7, 2021 KEV Nov 3, 2021
CVE-2021-42321	Authenticated RCE via Insecure Deserialization in Microsoft Exchange Server	8.8	92%	KEVRansomwarePoC ×2	Nov 10, 2021 KEV Nov 17, 2021
CVE-2021-44077	Unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus and SupportCenter Plus	9.8	94%	KEVPoC	Nov 29, 2021 KEV Dec 1, 2021
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022

From the original article

2 min read at thehackernews.com

Microsoft is warning of an uptick among nation-state and criminal actors increasingly leveraging publicly-disclosed zero-day vulnerabilities for breaching target environments.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.