Advisoryhigh

Threat Advisory: NSA SVR Advisory Coverage

Cisco Talosby Nick BiasiniApr 15, 2021 · 15:45 UTC (Apr 15, 2021)2 min read4 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-13379 CVE-2019-9670 CVE-2019-11510 CVE-2019-19781 CVE-2020-4006

Tags: cve-2018-13379 cve-2019-9670 cve-2019-11510 cve-2019-19781 cve-2020-4006 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2019-11510	Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN	10.0	100%	KEVRansomwarePoC ×2	May 8, 2019 KEV Nov 3, 2021
CVE-2019-19781	Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP	9.8	100%	KEVRansomware	Dec 27, 2019 KEV Nov 3, 2021
CVE-2019-9670	XML External Entity (XXE) Injection in Synacor Zimbra Collaboration Suite (ZCS)	9.8	100%	KEVPoC ×3	May 29, 2019 KEV Jan 10, 2022
CVE-2020-4006	Command Injection in VMware Workspace ONE Access and Identity Manager	9.1	17%	KEV	Nov 23, 2020 KEV Nov 3, 2021

From the original article

2 min read at blog.talosintelligence.com

The U. S. National Security Agency released an advisory outlining several vulnerabilities that the Russian Foreign Intelligence Services (SVR) is exploiting in the wild.

Cisco Talos

By Nick Biasini · blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.