Vulnerability Details CVE-2021-36798
A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allows remote attackers to crash the C2 server thread and block beacons' communication with it.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.277
EPSS Ranking 96.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/
- https://www.cobaltstrike.com/releasenotes.txt
- https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/
- https://www.cobaltstrike.com/releasenotes.txt
Products affected by CVE-2021-36798
-
cpe:2.3:a:helpsystems:cobalt_strike:4.2
-
cpe:2.3:a:helpsystems:cobalt_strike:4.3