Lucene search

K
wizblogWiz BlogWIZBLOG:05C991705D3988A643038F75137655BC
HistoryJun 04, 2023 - 6:20 p.m.

CVE-2023-34362 RCE vulnerability in MOVEit Transfer exploited in the wild: everything you need to know

2023-06-0418:20:05
Wiz Blog
www.wiz.io
114
rce
cve-2023-34362
moveit transfer
remote code execution
vulnerability
exploit
patch

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.97

Percentile

99.8%

Detect and mitigate CVE-2023-34362, a remote code execution vulnerability in MOVEit Transfer exploited in the wild. Organizations should patch urgently.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.97

Percentile

99.8%