T1563Lateral Movement
Remote Service Session Hijacking
Adversaries may take control of preexisting sessions with remote services to move laterally in an environment. Users may use valid credentials to log into a service specifically designed to accept remote connections, such as telnet, SSH, and RDP. When a user logs into a service, a session will be established that will allow them to maintain a continuous interaction with that service. Adversaries…
CVEs7
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
CVEs linked to Remote Service Session Hijacking
7 CVEs, by priority. Each link shows its badge.- CVE-2019-16782Possible Information Leak / Session Hijack Vulnerability in RackMITRE CTID mapping of the CVE · primary impact3.7%Top 10%22.4priority
- CVE-2019-1724Cisco Small Business RV320 and RV325 Routers Session Hijacking VulnerabilityCisco · Cisco Small Business RV Series Router FirmwareHigh · 8.8T1563Remote Service Session HijackingMITRE CTID mapping of the CVE · primary impact1.5%Top 27%20.8priority
- CVE-2019-18573The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…MITRE CTID mapping of the CVE · primary impact1.0%Top 38%18.6priority
- CVE-2019-3784Cloud Foundry Stratos contains a Session Collision VulnerabilityMITRE CTID mapping of the CVE · primary impact1.1%Top 36%18.6priority
- CVE-2020-5290session fixation in rCTFMITRE CTID mapping of the CVE · primary impact0.8%Top 43%16.0priority
- CVE-2018-8852Philips e-Alert Unit (non-medical device), Version R2.1 and priorPhilips · e-Alert Unit (non-medical device)T1563Remote Service Session HijackingMITRE CTID mapping of the CVE · primary impact1.9%Top 20%15.9priority
- CVE-2019-3790Ops Manager uaa client issues tokens after refresh token expirationMITRE CTID mapping of the CVE · primary impact0.7%Top 49%14.5priority