Multiple vulnerabilities in Migration Toolkit for Applications 7.0

1) Resource exhaustion

EUVDB-ID: #VU83928

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-39326

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when handling HTTP chunked requests. A remote attacker can send specially crafted HTTP requests to the server and consume excessive memory resources.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds write

EUVDB-ID: #VU86246

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-0646

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error when processing untrusted input in the Linux kernel’s Transport Layer Security functionality in the way a user calls a function splice with a ktls socket as the destination. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use-after-free

EUVDB-ID: #VU85839

Risk: Low

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-0193

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the netfilter subsystem of the Linux kernel. A local user with CAP_NET_ADMIN capability can escalate privileges on the system.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) OS Command Injection

EUVDB-ID: #VU84789

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2023-51385

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Exploit availability: Yes

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation when processing user names, if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. A remote attacker can execute arbitrary OS commands via an untrusted Git repository.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

5) Use-after-free

EUVDB-ID: #VU86560

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-51042

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the amdgpu_cs_wait_all_fences() function in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Inadequate encryption strength

EUVDB-ID: #VU84537

Risk: Low

CVSSv4.0: 2.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2023-48795

CWE-ID: CWE-326 - Inadequate Encryption Strength

Exploit availability: Yes

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to incorrect implementation of the SSH Binary Packet Protocol (BPP), which mishandles the handshake phase and the use of sequence numbers. A remote attacker can perform MitM attack and delete the SSH2_MSG_EXT_INFO message sent before authentication starts, allowing the attacker to disable a subset of the keystroke timing obfuscation features introduced in OpenSSH 9.5.

The vulnerability was dubbed "Terrapin attack" and it affects both client and server implementations.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

7) Information disclosure

EUVDB-ID: #VU83900

Risk: Low

CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-46218

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to an error in curl that allows a malicious HTTP server to set "super cookies" that are then passed back to more origins than what is otherwise allowed or possible. A remote attacker can force curl to send such cookie to different and unrelated sites and domains.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Missing Encryption of Sensitive Data

EUVDB-ID: #VU83929

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-45285

CWE-ID: CWE-311 - Missing Encryption of Sensitive Data

Exploit availability: No

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to a fallback to insecure git. Using "go get" to fetch a module with the ".git" suffix may unexpectedly fallback to the insecure "git://" protocol if the module is unavailable via the secure "https://" and  git+ssh://" protocols, even if GOINSECURE is not set for said module. This only affects users who are not using the module proxy and are fetching modules directly (i.e. OPROXY=off).

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Use-after-free

EUVDB-ID: #VU84586

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-6817

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local authenticated user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the netfilter nf_tables component in Linux kernel. A local authenticated user can trigger a use-after-free error and escalate privileges on the system.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Resource exhaustion

EUVDB-ID: #VU66065

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-1962

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources in go/parser. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Out-of-bounds read

EUVDB-ID: #VU85443

Risk: Low

CVSSv4.0: 4.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-6610

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary condition within the smb2_dump_detail() function in fs/smb/client/smb2ops.c. A local user can trigger an out-of-bounds read error and gain access to sensitive information or crash the kernel.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Out-of-bounds read

EUVDB-ID: #VU85442

Risk: Low

CVSSv4.0: 4.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-6606

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary condition within the smbCalcSize() function in fs/smb/client/netmisc.c file. A local user can trigger an out-of-bounds read error and gain access to sensitive information or crash the kernel.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) NULL pointer dereference

EUVDB-ID: #VU85852

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-6536

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the __nvmet_req_complete() function in the Linux kernel's NVMe driver. A remote attacker can send specially crafted NVMe-oF/TCP packets to the system and perform a denial of service (DoS) attack.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) NULL pointer dereference

EUVDB-ID: #VU85853

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-6535

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the nvmet_tcp_execute_request() function in the Linux kernel's NVMe driver. A remote attacker can send specially crafted NVMe-oF/TCP packets to the system and perform a denial of service (DoS) attack.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) NULL pointer dereference

EUVDB-ID: #VU85854

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-6356

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the nvmet_tcp_build_iovec() function in the Linux kernel's NVMe driver. A remote attacker can pass specially crafted TCP packets to the system and perform a denial of service (DoS) attack.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Observable discrepancy

EUVDB-ID: #VU84568

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-6135

CWE-ID: CWE-203 - Observable discrepancy

Exploit availability: No

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to a side-channel attack in multiple NSS NIST curves, known as "Minerva". A remote attacker can recover the private key and decrypt data passed between server and client.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Out-of-bounds write

EUVDB-ID: #VU83311

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-5717

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

The vulnerability local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in the Linux kernel's Linux Kernel Performance Events (perf) component. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Use-after-free

EUVDB-ID: #VU82306

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-4244

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the Linux kernel netfilter: nf_tables component. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Install updates from vendor's website.

Red Hat Migration Toolkit for Applications: 7.0.0 - 7.0.1

• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:7.0.1:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHSA-2024:1433

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.