Week 44, 2018
29 October – 4 November 2018
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2018-14558 An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10…EPSS 8.5%
- Critical 10.0 EPSS 7%
- Critical 9.8 EPSS 3%
-
Critical 9.6
CVE-2018-3892 An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted packet can cause …EPSS 2.7%
-
Critical 9.0
CVE-2018-3934 An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets…EPSS 2.6%
-
Critical 9.1
CVE-2018-3900 An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause…EPSS 2.6%
-
Critical 9.0
CVE-2018-3947 An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network…EPSS 1.3%
- Critical 9.8 EPSS 1.2%
- Critical 9.0 EPSS 1.1%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2018-11759 The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK (mod_jk) Connector …EPSS 91%
- Unscored EPSS 71%
-
Unscored
CVE-2018-15706 WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vu…EPSS 32%
-
Unscored
CVE-2018-18925 Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session…EPSS 31%
-
Unscored
CVE-2018-18777 Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users …EPSS 23%
-
Unscored
CVE-2018-18850 In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission to modify deployment processes could upload a maliciously cr…EPSS 12%
-
Unscored
CVE-2018-15705 WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a director…EPSS 12%
- Unscored EPSS 12%
Advisories
- SUSE / openSUSE Security Updates 22
- Debian Security (DSA / DLA) 121 critical
- BSI CERT-Bund (WID) 9
- CISA ICS & IT advisories 52 critical
- Ubuntu Security Notices (USN) 3
- Oracle Linux Security Advisories (ELSA) 1
- DSA-4332-1 ruby2.3 - security update 2 CVEs
- ICSA-18-305-03 Circontrol CirCarLife 2 CVEs
- ICSA-18-305-01 AVEVA InduSoft Web Studio and InTouch Edge HMI (formerly InTouch Machine Edition) 2 CVEs