Week 7, 2018
12–18 February 2018
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 12%
- Critical 9.8 EPSS 3.4%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2017-12542 A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.EPSS 99%
Hewlett Packard Enterprise · Integrated Lights-out 4 (iLO 4)
-
Unscored
CVE-2017-5816 A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.EPSS 86%
Hewlett Packard Enterprise · Intelligent Management Center (iMC) PLAT
-
Unscored
CVE-2017-5817 A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.EPSS 83%
Hewlett Packard Enterprise · Intelligent Management Center (iMC) PLAT
-
Unscored
CVE-2017-12557 A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.EPSS 80%
Hewlett Packard Enterprise · Intelligent Management Center (iMC) PLAT
- High 7.5 EPSS 68%
- High 7.5 EPSS 65%
- High 7.5 EPSS 65%
- High 7.5 EPSS 65%
Advisories
- SUSE / openSUSE Security Updates 22
- Debian Security (DSA / DLA) 171 critical
- Ubuntu Security Notices (USN) 91 critical
- CISA ICS & IT advisories 63 critical
- BSI CERT-Bund (WID) 2
- CERT@VDE 1
- ICSA-18-046-02 GE D60 Line Distance Relay 2 CVEs
- DSA-4114-1 jackson-databind - security update 2 CVEs
- ICSA-18-046-01 Nortek Linear eMerge E3 Series 1 CVEs
- ICSA-18-044-01 WAGO PFC200 Series 1 CVEs
- USN-3565-1 exim4 vulnerability 1 CVEs