Policy & legalhighExploited in the wild

US Sanctions Russia and Expels 10 Diplomats Over SolarWinds Cyberattack

The Hacker Newsby @TheHackersNewsJun 4, 2021 · 10:27 UTC (Jun 4, 2021)4 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-13379 CVE-2019-9670 CVE-2019-11510 CVE-2019-19781 CVE-2020-4006

Tags: cve-2018-13379 cve-2019-9670 cve-2019-11510 cve-2019-19781 cve-2020-4006 policy-legal

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2019-11510	Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN	10.0	100%	KEVRansomwarePoC ×2	May 8, 2019 KEV Nov 3, 2021
CVE-2019-19781	Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP	9.8	100%	KEVRansomware	Dec 27, 2019 KEV Nov 3, 2021
CVE-2019-9670	XML External Entity (XXE) Injection in Synacor Zimbra Collaboration Suite (ZCS)	9.8	100%	KEVPoC ×3	May 29, 2019 KEV Jan 10, 2022
CVE-2020-4006	Command Injection in VMware Workspace ONE Access and Identity Manager	9.1	17%	KEV	Nov 23, 2020 KEV Nov 3, 2021

From the original article

4 min read at thehackernews.com

The U. S. and U.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.