| शीर्षक | Versions 4.2 and 4.3 of Cobalt Strike’s server contain multiple Denial of Service vulnerabilities (CVE-2021-36798) |
|---|
| विवरण | The vulnerabilities can render existing Beacons unable to communicate with their C2 server, prevent new beacons from being installed, and have the potential to interfere with ongoing operations.
CVE-2021-36798
Poc: https://github.com/Sentinel-One/CobaltStrikeParser/blob/master/extra/communication_poc.py
Fix: HelpSystems released Cobalt Strike 4.4, which contains a fix for CVE-2021-36798. |
|---|
| स्रोत | ⚠️ https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/ |
|---|
| उपयोगकर्ता | misc (UID 3) |
|---|
| सबमिशन | 04/08/2021 07:14 PM (5 साल पहले) |
|---|
| संयम | 04/08/2021 07:57 PM (43 minutes later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 180073 [HelpSystems Cobalt Strike Server 4.2/4.3 Screenshot readCountedBytes Hotcobalt सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|