Rewterz Threat Alert – FIN7 Using Windows 11 Alpha-Themed Docs to Drop Javascript Backdoor

Rewterz Threat Alert – SNAKE Ransomware – Active IOCs

September 8, 2021

Rewterz Threat Advisory – Multiple Apache Dubbo Vulnerabilities

Severity

High

Analysis Summary

CVE-2021-36162

Apache Dubbo could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in the SnakeYAML library. By using specially-crafted YAML rules, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2021-36163

Apache Dubbo could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in the Hessian protocol. By using a specially-crafted HessianSkeleton, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Impact

Code Execution
Unauthorized Access

Affected Vendors

Apache

Affected Products

Apache Dubbo 2.7.0
Apache Dubbo 2.7.12
Apache Dubbo 3.0.0
Apache Dubbo 3.0.1
Apache Dubbo 2.6.10

Remediation

Upgrade to the latest version of Apache Dubbo, available from the Apache Web site.

https://dubbo.apache.org/en/

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo