Credit card skimmer targets ASP.NET sites

🗓️ 06 Jul 2020 16:36:50Reported by Jérôme SeguraType

Credit card skimmer targets ASP.NET sites. Exploiting Telerik vulnerability CVE-2017-9248. Targeting ASP.NET version 4.0.30319 with shopping portals

Reporter	Title	Published	Views	Family All 31
GithubExploit	Exploit for Inadequate Encryption Strength in Telerik Ui_For_Asp.Net_Ajax	9 Jan 201813:53	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax	29 May 202007:29	–	githubexploit
ICS	Iranian Advanced Persistent Threat Actors Threaten Election-Related Systems	22 Oct 202012:00	–	ics
ICS	Threat Actors Exploit Progress Telerik Vulnerabilities in Multiple U.S. Government IIS Servers	15 Jun 202312:00	–	ics
ICS	Hitachi ABB Power Grids eSOMS Telerik	18 Mar 202100:00	–	ics
ATTACKERKB	CVE-2017-9248	3 Jul 201700:00	–	attackerkb
BDU FSTEC	The vulnerability of the Telerik.Web.UI.dll library of the Telerik UI software for ASP.NET AJAX and the Sitefinity web content management system allows a attacker to exploit the encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or MachineKey).	7 Sep 202100:00	–	bdu_fstec
Circl	CVE-2017-9248	21 Mar 201813:35	–	circl
CISA KEV Catalog	Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	CISA, FBI, and MS-ISAC Update Joint CSA on Progress Telerik Vulnerabilities	15 Jun 202312:00	–	cisa