DreamBus Malware Exploits Unpatched RocketMQ Servers

Threat actors exploit a known remote code vulnerability in RocketMQ servers to infect devices with DreamBus malware. CVE-2023-33246 was discovered in May 2023 and received a 9.8 score, which labels it as critical. It is a permission verification issue that impacts RocketMQ version 5.1.0 and older, allowing attackers to perform remote code execution under certain […]

The post DreamBus Malware Exploits Unpatched RocketMQ Servers appeared first on Heimdal Security Blog.

attackers code code execution code vulnerability critical cve cybersecurity news devices exploit exploits infect issue malware may may 2023 permission remote code remote code execution rocketmq rocketmq servers score servers threat threat actors under unpatched verification version vulnerability