Primary Categories: [[Akira]] Links: [[Akira Articles]] / [[Akira Ransom Note]] / [[Akira Tools]] / [[Akira TTP's]] # [[Akira CVE's]] # 2024 ## CVE-2024-37085 - VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management. - CVSS - 7.2 - https://nvd.nist.gov/vuln/detail/cve-2024-37085 ## CVE-2024-40711 - A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). - CVSS - 9.8 - https://nvd.nist.gov/vuln/detail/cve-2024-40711 ## CVE-2024-40766 - An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions. - CVSS - 9.8 - https://nvd.nist.gov/vuln/detail/cve-2024-40766 # 2023 ## CVE-2023-20263 - A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. - CVSS - 6.1 - https://nvd.nist.gov/vuln/detail/CVE-2023-20263 ## CVE-2023-20269 - A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user. - CVSS - 9.1 - https://nvd.nist.gov/vuln/detail/CVE-2023-20269 ## CVE-2023-27532 - Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts. - CVSS - 7.5 - https://nvd.nist.gov/vuln/detail/CVE-2023-27532 ## CVE-2023-48788 - A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets. - CVSS - 9.8 - https://nvd.nist.gov/vuln/detail/CVE-2023-48788 # 2022 ## CVE-2022-40684 - An authentication bypass using an alternate path or channel in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. - CVSS - 9.8 - https://nvd.nist.gov/vuln/detail/CVE-2022-40684 # 2021 ## CVE-2021-21972 - The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. - CVSS - 9.8 - https://nvd.nist.gov/vuln/detail/CVE-2021-21972 # 2020 ## CVE-2020-3259 - A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could lead to the disclosure of confidential information. - CVSS - 7.5 - https://nvd.nist.gov/vuln/detail/CVE-2020-3259 # 2019 ## CVE-2019-6693 - Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. - CVSS - 6.5 - https://nvd.nist.gov/vuln/detail/CVE-2019-6693