Ransomwarecritical

Ransomware gangs are abusing a zero

The RecordDec 18, 2022 · 00:00 UTC (Dec 18, 2022)2 min read1 · 1 read

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-38646 CVE-2021-42258

Tags: cve-2021-38646 cve-2021-42258 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-38646	RCE in Microsoft Office Access Connectivity Engine exploited by ransomware	7.8	8%	KEVRansomware	Sep 15, 2021 KEV Mar 28, 2022
CVE-2021-42258	Unauthenticated SQL Injection RCE in BQE BillQuick Web Suite	9.8	75%	KEVRansomwarePoC	Oct 22, 2021 KEV Nov 3, 2021

From the original article

2 min read at therecord.media

Multiple ransomware gangs have weaponized and are abusing a zero-day in EntroLink VPN appliances after an exploit was released on an underground cybercrime forum at the start of September 2021.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.