T1498Impact
Network Denial of Service
Adversaries may perform Network Denial of Service (DoS) attacks to degrade or block the availability of targeted resources to users. Network DoS can be performed by exhausting the network bandwidth services rely on. Example resources include specific websites, email services, DNS, and web-based applications. Adversaries have been observed conducting network DoS attacks for political purposes and…
CVEs9
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.9
Reports1
Detections
3 Sigma rules tagged T1498Network Denial of ServiceT14983 general rules
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Network Denial of Service
9 CVEs, by priority. Each link shows its badge.- CVE-2019-0708Microsoft Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft · Remote Desktop ServicesKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1498Network Denial of Service2 reportsMITRE CTID mapping of the KEV entry · follow-on activity>99.9%Top 0.01%86.0priority
- CVE-2021-22205GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityGitLab · Community and Enterprise EditionsKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 moreMITRE CTID mapping of the KEV entry · primary impact99.7%Top 0.05%80.0priority
- CVE-2022-26143MiCollab, MiVoice Business Express Access Control VulnerabilityMitel · MiCollab, MiVoice Business ExpressKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1498Network Denial of ServiceAI mapping from the description · primary impact87.3%Top 0.25%69.8priority
- CVE-2024-11120GeoVision Devices OS Command Injection VulnerabilityGeoVision · Multiple DevicesKEVPublic exploitCritical · 9.8T1133External Remote ServicesT1498Network Denial of ServiceMITRE CTID mapping of the KEV entry · primary impact28.4%Top 1.9%69.5priority
- CVE-2023-1389TP-Link Archer AX-21 Command Injection VulnerabilityMITRE CTID mapping of the KEV entry · follow-on activity>99.9%Top 0.01%69.2priority
- CVE-2025-6543Citrix NetScaler ADC and Gateway Buffer Overflow VulnerabilityCitrix · NetScaler ADC and GatewayKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1498Network Denial of ServiceMITRE CTID mapping of the KEV entry · primary impact10.4%Top 4.3%69.0priority
- CVE-2023-49897FXC AE1021, AE1021PE OS Command Injection VulnerabilityFXC · AE1021, AE1021PEKEVPublic exploitHigh · 8.8T1496Resource HijackingT1498Network Denial of ServiceMITRE CTID mapping of the KEV entry · follow-on activity50.4%Top 1.1%68.9priority
- CVE-2023-47565QNAP VioStor NVR OS Command Injection VulnerabilityMITRE CTID mapping of the KEV entry · follow-on activity73.3%Top 0.54%64.1priority
- CVE-2022-0028Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service VulnerabilityPalo Alto Networks · PAN-OSKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1498Network Denial of ServiceMITRE CTID mapping of the KEV entry · primary impact2.7%Top 14%61.2priority
Linked through a sub-technique
1 more- CVE-2024-45195Apache OFBiz Forced Browsing VulnerabilityApache · OFBizKEVPublic exploitHigh · 7.5T1133External Remote ServicesT1059Command and Scripting Interpreter+1 more>99.9%Top 0.02%68.2priority