Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

🗓️ 06 Oct 2022 12:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 184 Views

Top CVEs exploited by China since 2020, used to target US and allied networks, software & hardware companies for IP thef

Reporter	Title	Published	Views	Family All 3070
zdt	Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure Exploit	21 Aug 201900:00	–	zdt
zdt	Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution Vulnerability (1)	11 Jan 202000:00	–	zdt
zdt	Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution Exploit (2)	11 Jan 202000:00	–	zdt
zdt	Citrix Application Delivery Controller and Gateway 10.5 - Remote Code Execution Exploit	13 Jan 202000:00	–	zdt
zdt	Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal Exploit	16 Jan 202000:00	–	zdt
zdt	BIG-IP 15.0.0 < 15.1.0.3 - Traffic Management User Interface (TMUI) Remote Code Execution Exploit	7 Jul 202000:00	–	zdt
zdt	BIG-IP 15.0.0 < 15.1.0.3 - Traffic Management User Interface (TMUI) Remote Code Execution (2)	7 Jul 202000:00	–	zdt
zdt	F5 BIG-IP TMUI Directory Traversal / File Upload / Code Execution Exploit	7 Jul 202000:00	–	zdt
zdt	F5 Big-IP 13.1.3 Build 0.0.6 - Local File Inclusion Vulnerability	27 Jul 202000:00	–	zdt
zdt	Microsoft Exchange 2019 - SSRF to Arbitrary File Write (Proxylogon) Exploit	11 Mar 202100:00	–	zdt

Source	Link
facebook	www.facebook.com/sharer/sharer.php
twitter	www.twitter.com/intent/tweet
linkedin	www.linkedin.com/sharing/share-offsite/
	www.
cisa	www.cisa.gov/uscert/china
ic3	www.ic3.gov/Home/IndustryAlerts
nsa	www.nsa.gov/Press-Room/Cybersecurity-Advisories-Guidance/
media	www.media.defense.gov/2022/Oct/06/2003092365/-1/-1/0/Joint_CSA_Top_CVEs_Exploited_by_PRC_cyber_actors_.PDF
nsa	www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3055748/nsa-cisa-and-fbi-expose-prc-state-sponsored-exploitation-of-network-providers-d/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

06 Oct 2022 12:00Current

10High risk

Vulners AI Score10

CVSS 210

CVSS 3.110

CVSS 39.9

EPSS0.99999

SSVC

china cyber threat prc state-sponsored nsa assessment cisa advisory fbi reporting critical infrastructure information technology sector defense industrial base remote code execution arbitrary file read path traversal command injection authentication bypass