Exploit / PoCcritical

MOVEit hackers leverage new zero-day bug to breach organizations (CVE-2023-47246)

Help Net Securityby @helpnetsecurityNov 9, 2023 · 00:00 UTC (Nov 9, 2023)2 min read2

Read at helpnetsecurity.com

Analyze CVE-2023-47246 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-47246 CVE-2023-34362

Tags: cve-2023-47246 cve-2023-34362 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-34362	Unauthenticated SQL Injection in Progress MOVEit Transfer	9.8	100%	KEVRansomwarePoC	Jun 2, 2023 KEV Jun 2, 2023
CVE-2023-47246	Unauthenticated Path Traversal RCE in SysAid On-Premise Server	9.8	99%	KEVRansomwarePoC	Nov 10, 2023 KEV Nov 13, 2023

From the original article

2 min read at helpnetsecurity.com

A critical zero-day vulnerability (CVE-2023-47246) in the SysAid IT support and management software solution is being exploited by Lace Tempest, a ransomware affiliate known for deploying Cl0p ransomware. Lace Tempest has previously exploited zero-day vulnerability (CVE-2023-34362) in Progress Software’s MOVEit Transfer installations to steal data from many enterprises and public sector organizations .

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.