The U.S. Cybersecurity and Infrastructure Security Agency has alerted the public that attackers are actively exploiting four vulnerabilities in Plex Media Server through a coordinated attack known as Plex2Shell. When combined, these flaws allow attackers to obtain administrator access and execute code with elevated privileges on affected systems. Security researcher Zach Main discovered the vulnerabilities and reported them to Plex in July. Federal agencies have been directed to patch vulnerable systems or implement mitigations by October 23. The vulnerabilities affect Plex Media Server versions before 1.43.3.10861.
The four flaws range from medium to high severity individually but carry a critical rating of 9.8 when chained together. Active exploitation began after technical details and proof-of-concept code were published in mid-October, with early attacks targeting Plex honeypots to deploy cryptominers. In related security developments, CISA has also warned of active exploitation of vulnerabilities in Siemens Software Center and a Japanese web application firewall. Vendors have released patches and urged users to upgrade to the latest versions of their software.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
