CVSS 9.8 Critical EXPLOITED Patched 2023

CVE-2023-21554

Remote code execution vulnerability in Microsoft Message Queuing (MSMQ) service. Spring ilma vector used by Ursnif and other banking trojans.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 9.8 / 10.0

Severity Critical

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Message Queuing (MSMQ)

Exploitation Method Remote Code Execution

MITRE ATT&CK T1203 - Exploitation for Client Execution

CVE-2023-21554 Analizi

Microsoft Message Queuing (MSMQ) servisindeki kritik guvenlik acigi. CVSS skoru 9.8 olan bu acik, uzaktan kimlik dogrulama olmaksizin kod calistirma imkani taniyor. Ursnif bankacilik trojaninin 2023 kampanyalarinda aktif olarak kullanilmistir.

Teknik Detaylar

CVSS: 9.8/10
Etkilenen: Windows Server 2008-2022, Windows 10/11
Kosat: MSMQ servisinin aktif olmasi gerekiyor
Istismar: Ozel hazirlanmis MSMQ paketi gondererek

Ursnif Baglantisi

Ursnif (Gozi) grubu bu acigi ozellikle kurumsal ag sizmalarinda kullanmistir. MSMQ servisi cogu Windows Server kurulumunda varsayilan olarak aktif oldugu icin saldiri yuzeyı genis olmaktadir.

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs