Week 4, 2022
24–30 January 2022
Newly exploited 8
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
Critical 9.8
CVE-2014-1776 KEV Jan 28, 2022 Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory…EPSS 83%
-
Critical 9.8
CVE-2014-6271 KEV Jan 28, 2022 GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arb…EPSS 100%
-
Critical 9.8
CVE-2021-20038 KEV Jan 28, 2022 · ransomware A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to po…EPSS 100%
-
Critical 9.8
CVE-2022-22587 KEV Jan 28, 2022 A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 1…EPSS 12%
Apple · macOS · iOS and iPadOS
-
Critical 9.8
CVE-2020-5722 KEV Jan 28, 2022 The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use thi…EPSS 84%
-
Critical 9.8
CVE-2017-5689 KEV Jan 28, 2022 An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Stand…EPSS 92%
Intel · Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability
-
Critical 9.8
CVE-2014-7169 KEV Jan 28, 2022 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows re…EPSS 100%
-
High 7.8
CVE-2020-0787 KEV Jan 28, 2022 · ransomware An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows …EPSS 43%
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.1 EPSS 79%
-
Critical 9.1
CVE-2021-40407 An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS…EPSS 48%
- Critical 9.8 EPSS 32%
-
Critical 9.1
CVE-2021-40410 An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [4] the dns_data->dns1 va…EPSS 28%
-
Critical 9.1
CVE-2021-40412 An OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [8] the devname variable, …EPSS 27%
- Critical 9.8 EPSS 6%
-
Critical 9.8
CVE-2022-23852 Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.EPSS 5.1%
-
Critical 9.1
CVE-2021-40411 An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [6] the dns_data->dns2 va…EPSS 4.7%
- Critical 9.1 EPSS 4.4%
-
Critical 9.1
CVE-2021-40409 An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS…EPSS 3.7%
-
Critical 9.1
CVE-2021-40408 An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS…EPSS 3.7%
- Critical 9.8 EPSS 3.1%
-
Critical 9.1
CVE-2022-23096 An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data,…EPSS 2.6%
- Critical 9.1 EPSS 2.3%
- Critical 9.1 EPSS 2.2%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 7.8
CVE-2021-4034 A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users t…EPSS 95%
-
Unscored
CVE-2021-46065 A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitr…EPSS 92%
- Unscored EPSS 84%
-
Low 3.4
CVE-2021-23174 WordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 84%
- High 7.5 EPSS 55%
- Unscored EPSS 17%
- Medium 6.5 EPSS 12%
-
Unscored
CVE-2021-40167 A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation.…EPSS 7.7%
Advisories
- SUSE / openSUSE Security Updates 5416 critical
- Debian Security (DSA / DLA) 231 critical
- BSI CERT-Bund (WID) 21
- Ubuntu Security Notices (USN) 11
- Oracle Linux Security Advisories (ELSA) 8
- Rocky Linux Security Advisories 5
- AlmaLinux Security Advisories 5
- CISA ICS & IT advisories 1
- CERT@VDE 1
- Amazon Linux Security Center (ALAS) 1
- SUSE-SU-2022:0183-1 Security update for webkit2gtk3 52 CVEs
- SUSE-SU-2022:0182-1 Security update for webkit2gtk3 43 CVEs
- openSUSE-SU-2022:0182-1 Security update for webkit2gtk3 43 CVEs
- openSUSE-SU-2022:0199-1 Security update for MozillaThunderbird 14 CVEs
- SUSE-SU-2022:0199-1 Security update for MozillaThunderbird 14 CVEs
- SUSE-SU-2022:14880-1 Security update for MozillaFirefox 14 CVEs
- DLA-2904-1 expat - security update 10 CVEs
- SUSE-SU-2022:0179-1 Security update for expat 8 CVEs
- SUSE-SU-2022:0178-1 Security update for expat 8 CVEs
- openSUSE-SU-2022:0178-1 Security update for expat 8 CVEs