Technology4 sources

CISA warns of active exploitation of Plex Media Server vulnerabilities

  • The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning about the exploitation of Plex Media Server vulnerabilities.
  • Four vulnerabilities in Plex Media Server are being actively exploited to install malware, including cryptominers and residential proxy apps.
  • Plex fixed these vulnerabilities at the start of last month, but exploitation continues despite the patches.
  • CISA and other sources advise users to update their Plex Media Server to the latest version to mitigate the risk.
  • The exploitation leads to unauthorized remote code execution on non-updated Plex servers.

Timeline

  1. Remote code execution on Plex servers

    Non-updated Plex servers are vulnerable to remote code execution.

  2. Plex vulnerabilities exploited for cryptomining

    Plex vulnerabilities are being exploited to drop cryptominers.

  3. CISA warns of Plex server exploitation

    CISA warns that attackers are exploiting four Plex Media Server vulnerabilities.

  4. Latest

    CISA details Plex2Shell attacks

    CISA warns that hackers are chaining Plex flaws in Plex2Shell attacks to breach servers.

CISA warns of active exploitation of Plex Media Server vulnerabilities | Split Angle