Vulnerability Intelligence

🛡 CVE-2017-11357

Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
Telerik User Interface (UI) for ASP.NET AJAX CWE-20

Ransomware use

KNOWN
CISA KEV

EPSS

75.7%
Likely exploited · 99th pct

Added to KEV

2023-01-26
CISA

Remediate by

2023-02-16
⚠ OVERDUE

CWE

CWE-20
weakness

📈 EPSS exploit probability

75.7%
FIRST EPSS — 30-day probability of exploitation in the wild · band Likely exploited · higher than 99% of all scored CVEs

⚠ KEV remediation overdue

CISA required federal remediation by 2023-02-16. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.

🏹 Attributed exploitation

Malware / ransomware (KEV): ransomware (KEV-flagged)

Malware pivots: 🦠 ransomware 🦠 ransomware (KEV-flagged)

🛡 Add to case

Attach CVE-2017-11357 (Vulnerability / CVE) and pull all linked entities:
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php