Lucene search

K
icsIndustrial Control Systems Cyber Emergency Response TeamAA23-250A
HistorySep 07, 2023 - 12:00 p.m.

Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475

2023-09-0712:00:00
Industrial Control Systems Cyber Emergency Response Team
www.cisa.gov
39
nation-state threat actors
cve-2022-47966
cve-2022-42475
patching
firewall security
endpoint detection
unauthorized access
privileged accounts.

0.976 High

EPSS

Percentile

100.0%

Actions to take today to mitigate malicious cyber activity:

  1. Patch all systems for known exploited vulnerabilities (KEVs), including firewall security appliances.
  2. Monitor for unauthorized use of remote access software using endpoint detection tools.
  3. Remove unnecessary (disabled) accounts and groups from the enterprise that are no longer needed, especially privileged accounts.

References