Multiple Progress Telerik UI Vulnerabilities Exploited in the Wild

FortiGuard Labs recently observed that multiple vulnerabilities (CVE-2019-18935, CVE-2017-11317 and CVE-2017-11357) in Progress Telerik UI (User Interface) are being exploited in chain to achieve arbitrary code execution on a remote machine. On March 15th, CISA released an advisory that multiple threat actors exploited unpatched IIS servers in a U.S. federal agency.Why is this Significant?This is significant because three Progress Telerik UI vulnerabilities are being exploited in chain for arbitrary code execution. On March 15th, 2023, CISA released an advisory that …

advisory agency cisa code code execution cve exploited federal federal agency iis interface labs machine march progress progress telerik servers telerik threat threat actors unpatched user interface vulnerabilities