Week 9, 2020

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2020-1938 Improper Privilege Management in Tomcat

  Apache · Apache Tomcat

  EPSS 99%
• Critical 9.8
  CVE-2020-4211 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, a…

  IBM · Spectrum Protect Plus

  EPSS 71%
• Critical 9.8
  CVE-2020-4222 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, a…

  IBM · Spectrum Protect Plus

  EPSS 15%
• Critical 9.8
  CVE-2020-4213 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, a…

  IBM · Spectrum Protect Plus

  EPSS 15%
• Critical 9.8
  CVE-2020-4210 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, a…

  IBM · Spectrum Protect Plus

  EPSS 15%
• Critical 9.8
  CVE-2020-4212 IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, a…

  IBM · Spectrum Protect Plus

  EPSS 15%
• Critical 9.9
  CVE-2019-5138 An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A specially cra…
  EPSS 5.2%
• Critical 9.9
  CVE-2019-5153 An exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality of the Moxa AWK-3131A firmware version 1.13. A spe…
  EPSS 4.4%
• Critical 9.8
  CVE-2019-15609 OS Command Injection and Command Injection in kill-port-process
  EPSS 4%
• Critical 9.8
  CVE-2019-10801 OS Command Injection in enpeem
  EPSS 2.8%
• Critical 9.8
  CVE-2019-10803 push-dir Enables OS Command Injection
  EPSS 2.8%
• Critical 9.8
  CVE-2019-10804 OS Command Injection in serial-number
  EPSS 2.8%
• Critical 9.8
  CVE-2019-10796 OS Command Injection in rpi
  EPSS 2.8%
• Critical 9.9
  CVE-2019-5162 An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specia…
  EPSS 2.6%
• Critical 9.8
  CVE-2019-10802 OS Command Injection in giting
  EPSS 2.5%

All 18 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2020-8794 OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerabi…
  EPSS 89%
• Unscored
  CVE-2020-9465 An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated…
  EPSS 82%
• High 8.8
  CVE-2020-6418 Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  Google · Chrome

  EPSS 79%
• Unscored
  CVE-2020-9374 On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shel…
  EPSS 43%
• High 7.8
  CVE-2020-3837 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1…

  Apple · macOS · watchOS · tvOS

  EPSS 15%
• Unscored
  CVE-2015-0565 NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.

  NaCl · NaCL

  EPSS 14%
• Medium 4.8
  CVE-2020-1935 Potential HTTP request smuggling in Apache Tomcat

  Apache · Apache Tomcat

  EPSS 9.4%
• Unscored
  CVE-2020-3878 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watch…

  Apple · macOS · watchOS · tvOS

  EPSS 9.1%