CISA adds exploited Plex Media Server flaw to KEV catalog
The agency's Tuesday update covers four Plex Media Server vulnerabilities grouped as Plex2Shell, alongside Siemens and SiteGuard flaws, and sets a federal remediation deadline.
CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog on Tuesday, according to The Hacker News. Four of them affect Plex Media Server and are grouped together under the name Plex2Shell. The same update also covered flaws in Siemens and SiteGuard products.
The Plex entry the source lists is a server-side request forgery issue in Plex Media Server, rated 5.3 in the CVSS scoring the article cites. CISA's catalog entry describes the bug as letting an attacker who supplies any X-Plex-Token value put a full URL in the "protocol" parameter, forcing the Plex server to send a POST request to a destination the attacker chooses. The catalog entry says the flaw can be chained with three other Plex vulnerabilities.
The catalog lists Plex Media Server versions before 1.43.3.10861 as affected, with 1.43.3.10861 listed as unaffected. The source does not describe how the flaws were exploited in the wild, who was targeted, or what the other three Plex issues do.
Why it matters
KEV listing means CISA has evidence of exploitation, and it obliges U.S. federal civilian agencies to remediate on a set timeline. Organizations running Plex Media Server should treat internet-exposed instances as a priority, check their version against the vendor's advisory, and apply the vendor's mitigations. Where mitigations aren't available, the catalog's required action points to discontinuing use.
CVE references
Sources
- CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard FlawsPrimarythehackernews.com
If something here is wrong, tell us. Every correction is listed on the corrections page.
Don’t Just Read About Cyberattacks. Learn How They Work.
Go beyond the headlines. Explore hands-on cybersecurity labs, understand real-world vulnerabilities, and build practical security skills with HackZoneLabs.
Start Learning