(eset):research

web-assets.esetstatic.com · Undated · Licence: not cleared; local research copy only

CVEs this report names

2 CVEs

CVE-2016-5195Linux Kernel Race Condition Vulnerability
Linux · KernelKEVPublic exploitHigh · 7.0T1068Exploitation for Privilege Escalation1 report
83.5%Top 0.32%
71.7priority
CVE-2021-45467In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to…
Public exploitCritical · 9.8T1190Exploit Public-Facing Application T1136Create Account1 report
70.7%Top 0.6%
70.6priority

Another exploit Ebury operators use is Dirty COW (CVE-2016-5195), which

This pre-authentication file inclusion vulnerability is known as CVE-2021-45467, and was first documented publicly

None

No passage in this report has been tied to an ATT&CK technique.