CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four Plex Media Server vulnerabilities, collectively called Plex2Shell, to its Known Exploited Vulnerabilities catalog, ordering federal agencies to patch them. These flaws allow unauthenticated remote code execution and are actively exploited to deploy cryptocurrency miners and proxy malware. Additionally, CISA flagged a DLL sideloading vulnerability in Siemens Software Center as actively exploited.

This Wire brief sits within Fusion42's coverage of Cybersecurity.