Cybersecurity Alerts

Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-79

CWE-116

References

• https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/
• https://nvd.nist.gov/vuln/detail/CVE-2022-42948