About this tag
Unpatched servers, particularly Pulse Secure VPN appliances, remain a prime target for malicious actors due to unaddressed vulnerabilities. A notable example is CVE-2019-11510, a remote code execution flaw disclosed and patched by Pulse Secure in April 2019. Despite the availability of fixes, many organizations failed to apply updates, leading to continued exploitation. The Cybersecurity and Infrastructure Security Agency (CISA) has observed ongoing attacks against these unpatched servers, emphasizing the critical need for timely patch management. This tag covers discussions around the risks, real-world exploits, and security advisories related to unpatched servers, highlighting the importance of maintaining up-to-date systems to prevent compromise.
  1. News

    AA20-010A: Continued Exploitation of Pulse Secure VPN Vulnerability

    Original release date: January 10, 2020 Summary Unpatched Pulse Secure VPN servers continue to be an attractive target for malicious actors. Affected organizations that have not applied the software patch to fix a remote code execution (RCE) vulnerability, known as CVE-2019-11510, can become...
    • News
    • Security
    • access denied cisa cve-2019-11510 cyber threats cybersecurity exploitation incident response malware mitigation network security patch management pulse secure rce remote access security advisory software update threat actors unpatched servers vpn vulnerability
    • Replies: 0
    • Forum: Security Alerts