T1499.002Impact
Service Exhaustion Flood
Adversaries may target the different network services provided by systems to conduct a denial of service (DoS). Adversaries often target the availability of DNS and web services, however others have been targeted as well. Web server software can be attacked through a variety of means, some of which apply generally while others are specific to the software being used to provide the service. One…
CVEs3
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.2
Reports0
CVEs linked to Service Exhaustion Flood
3 CVEs, by priority. Each link shows its badge.- CVE-2021-45382D-Link Multiple Routers Remote Code Execution VulnerabilityD-Link · Multiple RoutersKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+4 moreMITRE CTID mapping of the KEV entry · follow-on activity97.8%Top 0.09%69.8priority
- CVE-2022-26258D-Link DIR-820L Remote Code Execution VulnerabilityD-Link · DIR-820LKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 moreMITRE CTID mapping of the KEV entry · follow-on activity91.6%Top 0.19%69.8priority
- CVE-2019-1703Cisco Firepower Threat Defense Software Packet Processing Denial of Service VulnerabilityMITRE CTID mapping of the CVE · primary impact2.9%Top 13%23.4priority