InfraTrust report warns of exploited flaws in critical network infrastructure

Attackers are actively exploiting vulnerabilities in critical network infrastructure including firewalls, VPNs, and application delivery controllers. The InfraTrust report highlights a class of PHP vulnerabilities dubbed 'PHP2Shell' that target web management interfaces of these appliances. The flaws allow attackers to potentially gain unauthorized access or control over affected devices. The scope of impact is broad, covering multiple types of network security appliances. Active exploitation in the wild makes this a high-severity concern for network administrators. Organizations relying on web-based management interfaces for their network devices are particularly at risk. The report underscores the ongoing targeting of perimeter network devices by threat actors. Patching and mitigation guidance is implied to be necessary for affected infrastructure operators.