Vulnerabilityhigh
Millions of devices could be hacked exploiting flaws targeted by tools stolen from FireEye
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-1812 | Credential Exposure & Privilege Escalation in Windows Group Policy Preferences | — | 65% | KEVRansomware | — KEV |
| CVE-2016-0167 | Win32k Local Privilege Escalation in Microsoft Windows (Vista through 10 1511) | 7.8 | 6% | KEVRansomware | KEV |
| CVE-2017-11774 | Security Feature Bypass in Microsoft Outlook Allows Arbitrary Command Execution | 7.8 | 60% | KEVPoC | KEV |
| CVE-2018-8581 | Privilege Escalation (Arbitrary User Impersonation) in Microsoft Exchange Server | 7.4 | 28% | KEVRansomware | KEV |
| CVE-2019-0604 | RCE in Microsoft SharePoint via Application Package Markup Validation Flaw | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-0708 | Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep) | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2020-0688 | RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys | 8.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
From the original article
2 min read at securityaffairs.com
Millions of devices are potential exposed to attacks targeting the vulnerabilities exploited by the tools stolen from the arsenal of FireEye. Security experts from Qualys are warning that more than 7. 5 million devices are potentially exposed to cyber attacks targeting the vulnerabilities exploited by the tools stolen from the arsenal of FireEye.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.