Week 25, 2017
19–25 June 2017
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2017-2805 An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera. A specially crafted htt…EPSS 26%
-
Critical 9.1
CVE-2017-2831 An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.…EPSS 2.8%
-
Critical 9.8
CVE-2016-8731 Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any camer…EPSS 2.6%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2017-9828 '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attacke…EPSS 82%
-
Unscored
CVE-2017-9829 '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on …EPSS 69%
-
Unscored
CVE-2017-9833 /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges. NOTE: multi…EPSS 68%
-
Unscored
CVE-2017-7668 The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the…EPSS 57%
-
Unscored
CVE-2017-0176 A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to e…EPSS 46%
Microsoft · Microsoft Windows Server 2003 SP1, SP2 Windows XP - SP3
-
Unscored
CVE-2017-7679 In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response…EPSS 39%
-
Unscored
CVE-2017-9757 IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited directly …EPSS 37%
-
Unscored
CVE-2017-3078 Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exp…EPSS 31%
Advisories
- SUSE / openSUSE Security Updates 272 critical
- Debian Security (DSA / DLA) 241 critical
- Ubuntu Security Notices (USN) 13
- Oracle Linux Security Advisories (ELSA) 4
- CISA ICS & IT advisories 31 critical
- SUSE-SU-2017:1660-1 Security update for tomcat 12 CVEs
- SUSE-SU-2017:1632-1 Security update for tomcat6 10 CVEs
- DSA-3893-1 jython - security update 1 CVEs
- ICSA-17-173-01 Siemens SIMATIC CP 44x-1 Redundant Network Access Modules 1 CVEs