Vulnerabilitycritical
Multiple APT groups are exploiting VPN vulnerabilities, NSA warns
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-13379 | Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2018-13382 | Unauthenticated SSL VPN Account-Takeover Flaw in Fortinet FortiOS and FortiProxy | 7.5 | 82% | KEVRansomware | KEV |
| CVE-2018-13383 | Out-of-Bounds Write in Fortinet FortiOS and FortiProxy SSL VPN Web Service | 6.5 | 32% | KEVRansomware | KEV |
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-11539 | Authenticated Command Injection in Ivanti Pulse Connect Secure and Policy Secure | 7.2 | 99% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-1579 | Format String RCE in Palo Alto Networks PAN-OS GlobalProtect Portal/Gateway | 8.1 | 44% | KEVRansomwarePoC | KEV |
From the original article
2 min read at securityaffairs.com
NSA is warning of multiple state-sponsored cyberespionage groups exploiting enterprise VPN Flaws Last week, the UK’s National Cyber Security Centre (NCSC) reported that advanced persistent threat (APT) groups have been exploiting recently disclosed VPN vulnerabilities in enterprise VPN products in attacks in the wild.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.