CVE-2021-40539

Vulnerability updated 7 months ago (2024-05-04T20:07:34.708Z)

Download STIX

Preview STIX

Not enough context has been learned about CVE-2021-40539 for a description yet. However we're tracking it as a Vulnerability profile. Vulnerability: A flaw in software design or implementation

Description last updated:

What's your take? (Question 1 of 4)

Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.

Aliases We are not currently tracking any aliases

Miscellaneous Associations

Other elements of context that could aid in the identification of relevance

Vulnerability

Exploit

Analyst Notes & Discussion

Be the first to leave your mark here! Log in to share your views and vote.

Associated Malware

To see the evidence that has resulted in these malware associations, create a free account

Alias Description	Association Type	Votes
The Trigona Malware is associated with CVE-2021-40539. Trigona was a significant strain of ransomware that emerged in 2022, known for its harmful effects on computer systems. The malware infiltrated systems through suspicious downloads, emails, or websites, often without the user's knowledge. Once inside, it could steal personal information, disrupt ope	Unspecified	3

Associated Threat Actors

To see the evidence that has resulted in these threatActor associations, create a free account

Alias Description	Association Type	Votes
The Vanguard Panda Threat Actor is associated with CVE-2021-40539. Vanguard Panda, also known as Volt Typhoon, Bronze Silhouette, Insidious Taurus, and APT41, is a cyberespionage group linked to the Chinese government. Since mid-2021, this threat actor has targeted critical infrastructure sectors including manufacturing, utility, maritime, and government entities i	Unspecified	2

Associated Vulnerabilities

To see the evidence that has resulted in these vulnerability associations, create a free account

Alias Description	Association Type	Votes
The Log4Shell Vulnerability is associated with CVE-2021-40539. Log4Shell is a significant software vulnerability (CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105) that exists in the Log4j Java-based logging utility. It was exploited by various Advanced Persistent Threat (APT) actors, including LockBit affiliates and GOLD MELODY (UNC961), to gain unauthorized	Unspecified	2

Source Document References

Information about the CVE-2021-40539 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more

Source Link	CreatedAt	Title
CISA	8 days ago	2023 Top Routinely Exploited Vulnerabilities \| CISA
CERT-EU	9 months ago	Sensor Intel Series: Top CVEs in December 2023
CERT-EU	a year ago	Ransomware Spotlight: Trigona - Security News \| #hacking \| #cybersecurity \| #infosec \| #comptia \| #pentest \| #ransomware \| National Cyber Security Consulting
CERT-EU	a year ago	Sensor Intel Series: Top CVEs in October 2023
CERT-EU	a year ago	Ukrainian Hacktivists Claim Trigona Ransomware Takedown
BankInfoSecurity	a year ago	Ukrainian Hacktivists Claim Trigona Ransomware Takedown
CERT-EU	a year ago	Sensor Intel Series: Top CVEs in August 2023 \| F5 Labs
BankInfoSecurity	a year ago	Feds Urge Immediate Patching of Zoho and Fortinet Products
BankInfoSecurity	a year ago	Feds Urge Immediately Patching of Zoho and Fortinet Products
Malwarebytes	a year ago	2022's most routinely exploited vulnerabilities—history repeats
BankInfoSecurity	a year ago	Patching Conundrum: 5-Year Old Flaw Again Tops Most-Hit List
CERT-EU	a year ago	Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities
CERT-EU	a year ago	FBI, CISA, and NSA reveal top exploited vulnerabilities of 2022
CERT-EU	a year ago	Most exploited cyber vulnerabilities of 2022 revealed
CERT-EU	a year ago	Cyber Security Week in Review: August 4, 2023
BankInfoSecurity	a year ago	Patching Conundrum: 4-Year Old Flaw Again Tops Most-Hit List
Securityaffairs	a year ago	CISA, FBI, and NSA published the list of 12 most exploited vulnerabilities of 2022
CERT-EU	a year ago	FBI, CISA, and NSA reveal top exploited vulnerabilities of 2022
CISA	a year ago	2022 Top Routinely Exploited Vulnerabilities \| CISA
CrowdStrike	a year ago	Falcon Complete MDR Thwarts VANGUARD PANDA Tradecraft