Lucene search

K
trendmicroblogAbdelrahman EsmailTRENDMICROBLOG:1967FF5F4D1C886359045DE5F513A35D
HistoryAug 28, 2024 - 12:00 a.m.

Cryptojacking via CVE-2023-22527: Dissecting a Full-Scale Cryptomining Ecosystem

2024-08-2800:00:00
Abdelrahman Esmail
www.trendmicro.com
8
cryptojacking
cve-2023-22527
exploitation

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.971

Percentile

99.8%

A technical analysis on how CVE-2023-22527 can be exploited by malicious actors for cryptojacking attacks that can spread across the victim’s system.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.971

Percentile

99.8%