VulnerabilityhighExploited in the wild

CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek Devices

The Hacker Newsby @TheHackersNewsMar 29, 2025 · 03:45 UTC (Mar 29, 2025)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-9874 CVE-2019-9875 CVE-2020-8515 CVE-2021-20123 CVE-2021-20124

Tags: cve-2019-9874 cve-2019-9875 cve-2020-8515 cve-2021-20123 cve-2021-20124 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-9874 +1 related CVE CVE-2019-9875	Unauthenticated .NET Deserialization RCE in Sitecore CMS and Experience Platform	9.8 group max	84%	KEVPoC	May 31, 2019 KEV Mar 26, 2025
CVE-2020-8515	Unauthenticated Command Injection RCE in DrayTek Vigor3900/2960/300B Routers	9.8	100%	KEVPoC	Feb 1, 2020 KEV Nov 3, 2021
CVE-2021-20124 +1 related CVE CVE-2021-20123	Unauthenticated Path Traversal File Download in DrayTek VigorConnect	7.5	96%	KEVPoC	Oct 13, 2021 KEV Sep 3, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Mar 27, 2025 Vulnerability / Threat Intelligence The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added two six-year-old security flaws impacting Sitecore CMS and Experience Platform (XP) to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.