Week 9, 2017
27 February – 5 March 2017
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 3.4%
- Critical 9.0 EPSS 2.6%
- Critical 9.8 EPSS 2.5%
- Critical 9.8 EPSS 2.4%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2017-5982 Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash…EPSS 78%
-
Unscored
CVE-2017-6343 The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Softwa…EPSS 60%
-
Unscored
CVE-2017-6403 An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and passw…EPSS 27%
-
Unscored
CVE-2016-6883 MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack.EPSS 14%
-
Unscored
CVE-2017-6342 An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS …EPSS 13%
- High 8.2 EPSS 11%
-
Unscored
CVE-2016-7406 Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username o…EPSS 10%
-
Unscored
CVE-2017-6341 Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 …EPSS 8.9%
Advisories
- Debian Security (DSA / DLA) 161 critical
- SUSE / openSUSE Security Updates 151 critical
- Ubuntu Security Notices (USN) 61 critical
- CISA ICS & IT advisories 4
- Oracle Linux Security Advisories (ELSA) 3
- BSI CERT-Bund (WID) 2
- USN-3212-1 tiff vulnerabilities 39 CVEs
- SUSE-SU-2017:0569-1 Security update for python-pysaml2 2 CVEs
- DSA-3801-1 ruby-zip - security update 1 CVEs