Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wizblogWiz BlogWIZBLOG:05C991705D3988A643038F75137655BC
HistoryJun 04, 2023 - 6:20 p.m.

CVE-2023-34362 RCE vulnerability in MOVEit Transfer exploited in the wild: everything you need to know

2023-06-0418:20:05
Wiz Blog
www.wiz.io
103

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.956 High

EPSS

Percentile

99.4%

JSON

Detect and mitigate CVE-2023-34362, a remote code execution vulnerability in MOVEit Transfer exploited in the wild. Organizations should patch urgently.

Related

thn 7
talosblog 5
packetstorm 1
malwarebytes 4
githubexploit 4
cisa_kev 1
nessus 1
prion 1
akamaiblog 1
rapid7blog 6
impervablog 2
cve 1
nuclei 1
zdt 1
qualysblog 3
metasploit 1
broadcom 1
attackerkb 1
hivepro 1
ics 2
trellix 2
wallarmlab 1
securelist 1
thn
thn
Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App
2023-06-05 12:03:00
New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered - Patch Now!
2023-06-10 08:50:00
Clop Ransomware Gang Likely Aware of MOVEit Transfer Vulnerability Since 2021
2023-06-08 13:56:00
talosblog
talosblog
URLs have always been a great hiding place for threat actors
2023-06-15 18:00:39
Cybersecurity hotlines at colleges could go a long way toward filling the skills gap
2023-06-22 18:00:44
Now’s not the time to take our foot off the gas when it comes to fighting disinformation online
2023-06-08 18:00:35
packetstorm
packetstorm
MOVEit SQL Injection
2023-06-23 00:00:00
malwarebytes
malwarebytes
Cl0p ransomware gang claims first victims of the MOVEit vulnerability
2023-06-06 01:00:00
More MOVEit vulnerabilities found while the first one still resonates
2023-06-12 02:00:00
Ransomware review: July 2023
2023-07-13 08:15:00
githubexploit
githubexploit
Exploit for SQL Injection in Progress Moveit Cloud
2023-06-06 15:33:49
Exploit for SQL Injection in Progress Moveit Cloud
2023-06-12 12:56:12
Exploit for SQL Injection in Progress Moveit Cloud
2023-06-09 19:07:32
cisa_kev
cisa_kev
Progress MOVEit Transfer SQL Injection Vulnerability
2023-06-02 00:00:00
nessus
nessus
Progress MOVEit Transfer < 2020.0 / 2020.1 / 2021.0 < 2021.0.6 / 2021.1.0 < 2021.1.4 / 2022.0.0 < 2022.0.4 / 2022.1.0 < 2022.1.5 / 2023.0.0 < 2023.0.1 Critical Vulnerability (May 2023)
2023-06-01 00:00:00
prion
prion
Sql injection
2023-06-02 14:15:00
akamaiblog
akamaiblog
MOVEit SQLi Zero-Day (CVE-2023-34362) Exploited by CL0P Ransomware Group
2023-06-08 09:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-06-23 19:01:39
CVE-2023-34362: MOVEit Vulnerability Timeline of Events
2023-06-14 19:10:05
Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability
2023-06-01 15:23:53
impervablog
impervablog
CVE-2023-34362 – MOVEit Transfer – An attack chain that retrieves sensitive information
2023-06-06 15:55:03
New MOVEit vulnerability CVE-2023-36934 blocked by Imperva
2023-07-10 15:50:43
cve
cve
CVE-2023-34362
2023-06-02 14:15:09
nuclei
nuclei
MOVEit Transfer - Remote Code Execution
2023-06-20 12:42:23
zdt
zdt
MOVEit SQL Injection Exploit
2023-06-26 00:00:00
qualysblog
qualysblog
Progress MOVEit Transfer Vulnerability Being Actively Exploited
2023-06-07 17:28:24
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
metasploit
metasploit
MOVEit SQL Injection vulnerability
2023-06-14 15:04:07
broadcom
broadcom
CVE-2023-34362 - a SQL injection vulnerability has been found in the MOVEit Transfer web application.
2023-07-27 00:00:00
attackerkb
attackerkb
CVE-2023-34362
2023-06-13 00:00:00
hivepro
hivepro
Actors, Threats and Vulnerabilities 5 June to 11 June 2023
2023-06-13 06:58:42
ics
ics
#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability
2023-06-07 12:00:00
Increased Truebot Activity Infects U.S. and Canada Based Networks
2023-07-06 12:00:00
trellix
trellix
The Bug Report - June 2023 Edition
2023-07-05 00:00:00
The Bug Report - June 2023 Edition
2023-07-05 00:00:00
wallarmlab
wallarmlab
What You Need To Know About MOVEit
2023-06-16 06:05:40
securelist
securelist
IT threat evolution in Q2 2023. Non-mobile statistics
2023-08-30 10:00:41

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.956 High

EPSS

Percentile

99.4%

JSON
Related for WIZBLOG:05C991705D3988A643038F75137655BC
thn7talosblog5packetstorm1malwarebytes4githubexploit4cisa_kev1nessus1prion1akamaiblog1rapid7blog6impervablog2cve1nuclei1zdt1qualysblog3metasploit1broadcom1attackerkb1hivepro1ics2trellix2wallarmlab1securelist1