The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a security warning concerning active exploitation of Plex Media Server installations. According to the agency, attackers are chaining four distinct vulnerabilities to perform unauthorized server breaches, a campaign currently being referred to as “Plex2Shell” attacks.
The coordinated use of these vulnerabilities allows malicious actors to execute commands or gain unauthorized access to underlying server infrastructure. Given the widespread use of Plex for media management, these findings highlight a significant risk to organizations and individuals running the software on internet-facing devices.
As CISA continues to monitor the situation, users and administrators are advised to review the official guidance to ensure their instances are properly secured against these exploitation attempts. Further details regarding the specific technical mechanisms of the vulnerabilities and recommended mitigations remain a focus of ongoing security efforts.
Source: BleepingComputer
Original article: https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/
Leave a Reply