Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-05-04. Apply updates per vendor instructions.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2/ The LockBit gang, responsible for thousands of attacks, exploits CVE-2023-29492. Patch systems regularly to stay ahead. #InfoSec #CyberAttack
Post summary
The LockBit gang is actively exploiting CVE-2023-29492; organizations should patch systems promptly to mitigate the threat.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | 3rdmill | novi_survey | - | - | - |