Threat actorhigh
CISA, FBI, NSA reveal five enterprise bugs exploited by Russia's APT29 group
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-13379 | Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-19781 | Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-9670 | XML External Entity (XXE) Injection in Synacor Zimbra Collaboration Suite (ZCS) | 9.8 | 100% | KEVPoC ×3 | KEV |
| CVE-2020-4006 | Command Injection in VMware Workspace ONE Access and Identity Manager | 9.1 | 17% | KEV | KEV |
From the original article
2 min read at therecord.media
Three US security agencies have published on Thursday a joint advisory to expose and draw attention to five vulnerabilities in popular enterprise equipment that have and are still being abused by Russian state hackers to breach corporate and government networks.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.