Vendor
CyberPersons
2 of 2 CyberPersons CVEs in Patchfirst (100%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild, 2 of them used by ransomware.
- CVEs
- 2
- In CISA KEV
- 2100%
- Known ransomware use
- 2
- Median days to KEV
- 22
- from publication
- Latest KEV listing
- 4 Dec 2024
Products
In KEVOther CVEs
- CyberPanel In KEV: 2 CVEs: 2
Top ATT&CK techniques
What attackers do with CyberPersons CVEs- T1190Exploit Public-Facing Application CVEs: 2
- T1059Command and Scripting Interpreter CVEs: 1
- T1059.004Unix Shell CVEs: 1
Counts are CyberPersons CVEs linked to the technique. Each link’s provenance is on the CVE page.
CyberPersons CVEs
2 CVEs, by priority- CVE-2024-51567CyberPanel Incorrect Default Permissions VulnerabilityCyberPersons · CyberPanelKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter84.4%Top 0.3%79.8priority
- CVE-2024-51378CyberPanel Incorrect Default Permissions VulnerabilityCyberPersons · CyberPanelKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell94.7%Top 0.14%79.8priority