Vulnerability Intelligence

🛡 CVE-2023-46604

📈 EPSS exploit probability

⚠ KEV remediation overdue

CISA required federal remediation by 2023-11-23. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the b

🏹 Attributed exploitation

Malware / ransomware (KEV): HelloKitty, Kinsing (ActiveMQ)

Threat actors (KEV): multiple

🔗 External references & OSINT

🔄 Internal pivots & actions

🛡 Add to case

🗃 Data Management

🧩 Advanced Capabilities