Known Exploited Vulnerability: CVE-2022-42948

Vendor: Fortra

Product: Cobalt Strike

Required action: Apply updates per vendor instructions.

Known ransomware campaign use: Unknown

Notes: https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/ https://nvd.nist.gov/vuln/detail/CVE-2022-42948

CWEs