Advisory: APT29 targets

ncsc.gov.uk · Undated · Licence: not cleared; local research copy only

CVEs this report names

4 CVEs

CVE-2019-11510Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
Ivanti · Pulse Connect SecureKEVRansomwarePublic exploitCritical · 10.0T1133External Remote Services T1059Command and Scripting Interpreter+2 more · 6 reports
>99.9%Top 0.01%
90.0priority
CVE-2018-13379Fortinet FortiOS SSL VPN Path Traversal Vulnerability
Fortinet · FortiOSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application5 reports
>99.9%Top 0.01%
89.9priority
CVE-2019-19781Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVRansomwarePublic exploitCritical · 9.8T1133External Remote Services T1059Command and Scripting Interpreter+1 more · 8 reports
>99.9%Top 0.01%
89.9priority
CVE-2019-9670Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
Synacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1005Data from Local System2 reports
>99.9%Top 0.02%
76.0priority