Skip to content
COOEY

EXPOSURES › CVE-2017-9822

CVE-2017-9822

CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2021-11-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-9822 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 95/100 ransomwarerceexploited-in-wild

DotNetNuke (DNN) allowed remote code execution via a cookie deserialization vulnerability, actively exploited in ransomware attacks and impacting DIB organizations using the platform for web content management.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
DotNetNuke (DNN) · vendorDotNetNuke (DNN) · product
DESCRIPTION

DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.70
…
cooey ↗ severe-fallout -0.70
…
"…"
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.