Exploit / PoCcritical
China-Linked Group Breaches Networks via Connectwise, F5 Software Flaws
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-0185 | Heap-Based Buffer Overflow in Linux Kernel Filesystem Context API | 8.4 | 25% | KEVPoC ×2 | KEV |
| CVE-2022-3052 | Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in… | 8.8 | <1% | ||
| CVE-2023-22518 | Improper Authorization in Atlassian Confluence Data Center and Server | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-46747 | F5 BIG-IP TMUI Authentication Bypass Enables Unauthenticated RCE | 9.8 | 97% | KEVRansomwarePoC ×2 | KEV |
| CVE-2024-1709 | Authentication Bypass in ConnectWise ScreenConnect Creates Rogue Admin Accounts | 10.0 | 100% | KEVRansomwarePoC ×3 | KEV |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Mar 22, 2024 Cyber Defense / Vulnerability A China-linked threat cluster leveraged security flaws in Connectwise ScreenConnect and F5 BIG-IP software to deliver custom malware capable of delivering additional backdoors on compromised Linux hosts as part of an "aggressive" campaign.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.