Week 31, 2017
31 July – 6 August 2017
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2017-9769 A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened…EPSS 86%
-
Unscored
CVE-2017-11394 Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. T…EPSS 67%
-
Unscored
CVE-2017-11391 Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vul…EPSS 62%
Trend Micro · Trend Micro InterScan Messaging Security Virtual Appliance
-
Unscored
CVE-2017-7442 Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.EPSS 41%
-
Unscored
CVE-2017-11383 SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHa…EPSS 38%
-
Unscored
CVE-2017-11384 SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHan…EPSS 38%
-
Unscored
CVE-2017-11385 SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHa…EPSS 38%
-
Unscored
CVE-2017-11392 Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vul…EPSS 34%
Trend Micro · Trend Micro InterScan Messaging Security Virtual Appliance
Advisories
- SUSE / openSUSE Security Updates 14
- Ubuntu Security Notices (USN) 8
- Debian Security (DSA / DLA) 6
- CISA ICS & IT advisories 43 critical
- BSI CERT-Bund (WID) 3
- ICSMA-17-215-02 ICSMA-17-215-02_Siemens Molecular Imaging Vulnerabilities 4 CVEs
- ICSA-17-213-01 Mitsubishi Electric Europe B.V. E-Designer 3 CVEs
- ICSMA-17-215-01 ICSMA-17-215-01_Siemens Molecular Imaging Vulnerabilities 2 CVEs