Ukraine: Disk-wiping Attacks Precede Russian Invasion

security.com · Undated · Licence: not cleared; local research copy only

CVEs this report names

1 CVE

CVE-2021-1636Microsoft SQL Elevation of Privilege Vulnerability
Microsoft · Microsoft SQL Server 2012 Service Pack 4 (QFE)Public exploitHigh · 8.81 report
6.7%Top 6.1%
70.4priority

Where it names them

CVE-2021-1636

UPDATE February 25, 2022, 17:00: This blog has been updated with details on how a known Microsoft SQL Server vulnerability (CVE-2021-1636) was exploited in at least one attack.

Original ↗

The attackers appear to have used an exploit of a known vulnerability in Microsoft SQL Server (CVE-2021-1636) in order to compromise at least one of the targeted organisations.

Original ↗

Techniques drawn from this report

None

No passage in this report has been tied to an ATT&CK technique.