One Article Review
| Source |  The Hacker News |
|---|---|
| Identifiant | 8635240 |
| Date de publication | 2025-01-09 15:05:00 (vue: 2025-01-09 11:08:45) |
| Titre | Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection |
| Texte | Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve remote code execution (RCE).
The vulnerability in question, CVE-2024-52875, refers to a carriage return line feed (CRLF) injection attack, paving the way for HTTP response splitting, which could then
Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve remote code execution (RCE). The vulnerability in question, CVE-2024-52875, refers to a carriage return line feed (CRLF) injection attack, paving the way for HTTP response splitting, which could then |
| Notes | ★★★ |
| Envoyé | Oui |
| Condensat | 2024 52875 achieve actors advantage allow allows are attack attempting carriage code could critical crlf cve disclosed execution exploited feed firewalls flaw gfi http impacting injection keriocontrol line malicious paving question rce recently refers remote response return security splitting successfully take then threat vulnerability way which |
| Tags | Vulnerability Threat |
| Stories | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.