Week 32, 2018
6–12 August 2018
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 68%
- Critical 9.8 EPSS 20%
- Critical EPSS 6.5%
- Critical 10.0 EPSS 3.8%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- High 8.1 EPSS 77%
-
Unscored
CVE-2018-5390 Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can…EPSS 72%
- High 7.5 EPSS 33%
-
Unscored
CVE-2018-7092 A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E0506P09. The vulnerability could be remote…EPSS 24%
Hewlett Packard Enterprise · HPE Intelligent Management Center Platform (IMC Plat)
-
Unscored
CVE-2016-4391 A remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector prior to v7.3.0.EPSS 18%
-
Unscored
CVE-2018-15137 CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml), which causes remote code execution as…EPSS 18%
-
Unscored
CVE-2018-14028 In WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files. This allows for PHP files to be uploaded. Once a PHP file is uploa…EPSS 15%
-
Unscored
CVE-2017-8990 A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software earlier than version WS…EPSS 15%
Hewlett Packard Enterprise · HPE Intelligent Management Center (IMC) Wirelss Service Manager
Advisories
- SUSE / openSUSE Security Updates 321 critical
- Debian Security (DSA / DLA) 12
- Ubuntu Security Notices (USN) 8
- CISA ICS & IT advisories 82 critical
- BSI CERT-Bund (WID) 5
- Amazon Linux Security Center (ALAS) 51 critical
- Oracle Linux Security Advisories (ELSA) 3
- Siemens ProductCERT 1
- ALAS2-2018-1058 Critical: kernel security update (Amazon Linux 2) 4 CVEs
- ICSA-18-221-02 NetComm Wireless 4G LTE Light Industrial M2M Router 4 CVEs
- ICSA-18-221-01 Crestron TSW-X60 and MC3 4 CVEs
- SUSE-SU-2018:2204-1 Security update for libsoup 2 CVEs