Check Point Research has identified active, in-the-wild exploitation of PHP2Shell, a vulnerability in PHP that also affects Check Point Security Gateways. In the observed incidents, the attacker exploited PHP2Shell to gain initial access, then used a local privilege escalation vulnerability to obtain root privileges and establish persistence. Security fixes for Check Point Security Gateway and Management were available one week before the attack, on October 23rd. Only a couple of dozen unpatched systems, in a single region, were compromised in the observed incidents. Affected customers were notified in real time. Check Point Research, through its Incident Response teams, worked to […]
Read the original article:
Security Advisory: Active Exploitation of PHP2Shell and Local Privilege Escalation