Vulnerabilitycritical

Crooks exploit CVE-2018-7602 Drupal flaw, aka Drupalgeddon3 to deliver Monero miner

Security Affairsby @securityaffairsJun 22, 2018 · 17:19 UTC (Jun 22, 2018)2 min read4

Read at securityaffairs.com

Analyze CVE-2018-7602 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2018-7602 CVE-2018-7600 CVE-2014-0160 CVE-2014-6271 CVE-2017-5674 CVE-2004-0113

Tags: cve-2018-7602 cve-2018-7600 cve-2014-0160 cve-2014-6271 cve-2017-5674 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2014-0160	Heartbleed: unauthenticated memory disclosure in OpenSSL TLS/DTLS heartbeat handling	—	100%	KEV	— KEV May 4, 2022
CVE-2014-6271	Arbitrary Code Execution in GNU Bash (Shellshock)	—	100%	KEV	— KEV Jan 28, 2022
CVE-2017-5674	A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a…	9.8	22%	PoC ×2	Mar 13, 2017
CVE-2018-7600	Unauthenticated Remote Code Execution in Drupal Core (Drupalgeddon 2)	9.8	100%	KEVRansomwarePoC ×4	Mar 29, 2018 KEV Nov 3, 2021
CVE-2018-7602	Drupal Core Remote Code Execution Vulnerability	9.8	99%	KEVRansomwarePoC ×2	Jul 19, 2018 KEV Apr 13, 2022

From the original article

2 min read at securityaffairs.com

Crooks are attempting to exploit a recently patched Drupal vulnerability, tracked as CVE-2018-7602 , to drop Monero mining malware onto vulnerable systems.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.