Week 25, 2020

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2020-8165 ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore
  EPSS 46%
• Critical 9.8
  CVE-2020-11910 The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.
  EPSS 11%
• Critical 9.8
  CVE-2020-11969 Missing Authentication for Critical Function in Apache TomEE
  EPSS 4.2%
• Critical 9.1
  CVE-2020-11909 The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.
  EPSS 3.6%
• Critical 9.6
  CVE-2020-14440 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753…
  EPSS 3.1%
• Critical 9.8
  CVE-2018-21246 Caddy vulnerable to Authentication Bypass due to mishandling of TLS client authentication
  EPSS 2.7%
• Critical 9.6
  CVE-2020-14439 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753…
  EPSS 2.4%
• Critical 9.6
  CVE-2020-14436 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753…
  EPSS 2.3%
• Critical 9.6
  CVE-2020-14442 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753…
  EPSS 1.8%
• Critical 9.6
  CVE-2020-14441 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753…
  EPSS 1.8%
• Critical 9.6
  CVE-2020-14438 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753…
  EPSS 1.8%
• Critical 9.6
  CVE-2020-14437 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753…
  EPSS 1.8%
• Critical 9.8
  CVE-2020-9296 Expression Language Injection in Netflix Conductor
  EPSS 1.7%
• Critical 9.8
  CVE-2020-14942 Deserialization of Untrusted Data in Tendenci
  EPSS 1.4%
• Critical 9.8
  CVE-2017-18900 Mattermost Server is vulnerable CSV Injection
  EPSS 1.3%

All 27 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2020-14295 A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because th…
  EPSS 86%
• Unscored
  CVE-2020-11896 The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.
  EPSS 37%
• Unscored
  CVE-2020-14011 Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is manually …
  EPSS 29%
• Unscored
  CVE-2020-11901 The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.
  EPSS 22%
• Unscored
  CVE-2020-11898 The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an infor…
  EPSS 19%
• Medium 5.4
  CVE-2020-11899 The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
  EPSS 18%
• Unscored
  CVE-2020-13640 A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order p…
  EPSS 15%
• High 8.1
  CVE-2020-4469 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP comman…

  IBM · Spectrum Protect Plus

  EPSS 13%