Technology4 sources
CISA warns of active exploitation of Plex Media Server vulnerabilities
- The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning about the exploitation of Plex Media Server vulnerabilities.
- Four vulnerabilities in Plex Media Server are being actively exploited to install malware, including cryptominers and residential proxy apps.
- Plex fixed these vulnerabilities at the start of last month, but exploitation continues despite the patches.
- CISA and other sources advise users to update their Plex Media Server to the latest version to mitigate the risk.
- The exploitation leads to unauthorized remote code execution on non-updated Plex servers.
Timeline
Remote code execution on Plex servers
Non-updated Plex servers are vulnerable to remote code execution.
Plex vulnerabilities exploited for cryptomining
Plex vulnerabilities are being exploited to drop cryptominers.
CISA warns of Plex server exploitation
CISA warns that attackers are exploiting four Plex Media Server vulnerabilities.
Latest
CISA details Plex2Shell attacks
CISA warns that hackers are chaining Plex flaws in Plex2Shell attacks to breach servers.