Malwarehigh

Salt Typhoon used custom malware JumbledPath to spy on U.S. telecom providers

Security Affairsby @securityaffairsFeb 20, 2025 · 23:17 UTC (Feb 20, 2025)4 min read4 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-20198 CVE-2023-20273 CVE-2018-0171

Tags: cve-2023-20198 cve-2023-20273 cve-2018-0171 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-0171	Unauthenticated RCE/DoS in Cisco IOS & IOS XE Smart Install	9.8	99%	KEV	Mar 28, 2018 KEV Nov 3, 2021
CVE-2023-20198	Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)	10.0	100%	KEV	Oct 16, 2023 KEV Oct 16, 2023
CVE-2023-20273	Authenticated Command Injection (Root) in Cisco IOS XE Web UI	7.2	93%	KEV	Oct 25, 2023 KEV Oct 23, 2023

From the original article

4 min read at securityaffairs.com

China-linked cyber espionage group Salt Typhoon uses custom malware JumbledPath to on spy U. S. telecom providers.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.