Continued Exploitation of Pulse Secure VPN Vulnerability

ronjor · Jan 10, 2020

Original release date: January 10, 2020
Summary

Unpatched Pulse Secure VPN servers continue to be an attractive target for malicious actors. Affected organizations that have not applied the software patch to fix a remote code execution (RCE) vulnerability, known as CVE-2019-11510, can become compromised in an attack. [1]
Although Pulse Secure [2] disclosed the vulnerability and provided software patches for the various affected products in April 2019, the Cybersecurity and Infrastructure Security Agency (CISA) continues to observe wide exploitation of CVE-2019-11510. [3] [4] [5]
CISA expects to see continued attacks exploiting unpatched Pulse Secure VPN environments and strongly urges users and administrators to upgrade to the corresponding fixes. [6]
Click to expand...

Log in or Sign up

Continued Exploitation of Pulse Secure VPN Vulnerability

ronjor Global Moderator

Log in or Sign up

Continued Exploitation of Pulse Secure VPN Vulnerability

ronjor Global Moderator

Useful Searches