Infratrust report highlights active exploitation of critical network infrastructure

A new report from Infratrust has issued a warning regarding the active exploitation of vulnerabilities within critical network infrastructure. According to the report, malicious actors are targeting web management interfaces across a range of enterprise appliances, including firewalls, virtual private networks (VPNs), and application delivery controllers.

The findings specifically highlight the risk posed by vulnerabilities categorized as “PHP2Shell.” These flaws, which affect PHP-based management interfaces, provide attackers with a pathway to potentially compromise network security hardware. By exploiting these weaknesses, unauthorized parties may gain access to appliances that serve as essential components of an organization’s digital perimeter and traffic management systems.

The report underscores the ongoing challenge of securing widely used network appliances that often contain critical administrative interfaces reachable over a network. Further details regarding the specific scope of these exploits or recommended mitigation steps for affected administrators were not included in the initial report summary.

Source: BleepingComputer
Original article: https://www.bleepingcomputer.com/news/security/infratrust-report-warns-of-exploited-flaws-in-critical-network-infrastructure/