CISA warns of hackers now exploiting critical Node2Shell flaw
Summary
CISA has confirmed that malicious actors are actively exploiting a critical vulnerability in the Brotli compression algorithm, known as Node2Shell, Broccoli2Shell, and HTTP2Shell. This vulnerability allows attackers to remotely execute code on vulnerable systems.
IFF Assessment
The exploitation of a critical vulnerability by hackers represents a direct threat to the security of systems and data, making it bad news for defenders.
Severity
This vulnerability allows for remote code execution with high privileges, making it easily exploitable over the network. The potential impact on confidentiality, integrity, and availability is severe, leading to an estimated CVSS score of 9.8.
Defender Context
Defenders should be aware that this critical vulnerability is under active exploitation. Prompt patching and configuration hardening of systems utilizing Brotli compression are essential to mitigate the risk of compromise.