Week 11, 2022

14–20 March 2022

New CVEs: 571
Critical: 30
High: 86
Newly exploited: 15
Advisories: 150
Malicious pkgs: 0

Newly exploited 15

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2020-5135 KEV Mar 15, 2022 · ransomware A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malici…
SonicWall · SonicOS

EPSS 27%
High 8.2
CVE-2015-2546 KEV Mar 15, 2022 · ransomware The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and …
EPSS 10%
High 7.8
CVE-2019-1069 KEV Mar 15, 2022 · ransomware Task Scheduler Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 6.2%
High 7.8
CVE-2016-3309 KEV Mar 15, 2022 · ransomware The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Window…
EPSS 20%
High 7.8
CVE-2017-0101 KEV Mar 15, 2022 · ransomware The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 …
Microsoft · Windows

EPSS 57%
High 7.8
CVE-2019-0543 KEV Mar 15, 2022 · ransomware An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerabi…
EPSS 4.7%
High 7.8
CVE-2019-0841 KEV Mar 15, 2022 · ransomware An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…
Microsoft · Windows · Windows Server

EPSS 41%
High 7.8
CVE-2019-1315 KEV Mar 15, 2022 · ransomware An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevati…
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems

EPSS 3.5%
High 7.8
CVE-2019-1064 KEV Mar 15, 2022 · ransomware Windows Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 6.9%
High 7.8
CVE-2019-1253 KEV Mar 15, 2022 · ransomware An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker …
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems

EPSS 12%
High 7.8
CVE-2019-1322 KEV Mar 15, 2022 · ransomware An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerabi…
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems

EPSS 19%
High 7.8
CVE-2019-1405 KEV Mar 15, 2022 · ransomware An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems

EPSS 30%
High 7.8
CVE-2019-1129 KEV Mar 15, 2022 · ransomware An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems

EPSS 1.8%
High 7.8
CVE-2019-1132 KEV Mar 15, 2022 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…
Microsoft · Windows · Windows Server

EPSS 9.9%
High 7.0
CVE-2018-8120 KEV Mar 15, 2022 · ransomware An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…
Microsoft · Windows 7 · Windows Server 2008 R2 · Windows Server 2008

EPSS 73%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2022-24637 Improper Privilege Management in Open Web Analytics
EPSS 99%
Critical 9.8
CVE-2022-26265 Remote Code Execution in Contao Managed Edition
EPSS 30%
Critical 9.8
CVE-2022-22587 A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 1…
Apple · macOS · iOS and iPadOS

EPSS 12%
Critical 9.1
CVE-2022-0944 Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad
sqlpad · sqlpad/sqlpad

EPSS 8.5%
Critical 9.1
CVE-2020-25176 Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal
Rockwell Automation · ISaGRAF Runtime

EPSS 6.4%
Critical 9.1
CVE-2022-0742 Memory leak in ICMP6 in Linux Kernel
Linux · kernel

EPSS 5%
Critical 9.8
CVE-2021-44906 Prototype Pollution in minimist
EPSS 4.6%
Critical 9.8
CVE-2022-23812 Malicious Package
EPSS 4.2%
Critical 9.8
CVE-2022-25247 PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
PTC · Axeda Desktop Server for Windows · Axeda agent

EPSS 4.1%
Critical 9.8
CVE-2022-26501 Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
EPSS 4.1%
Critical 9.8
CVE-2022-0547 OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred auth…
EPSS 3.5%
Critical 9.8
CVE-2020-25197 GE Reason RT43X Clocks Code Injection
GE · Reason RT43X Clocks

EPSS 3.2%
Critical 9.8
CVE-2021-42171 Unrestricted Upload of File with Dangerous Type in Zenario CMS
EPSS 2.5%
Critical 9.9
CVE-2022-22771 TIBCO JasperReports Library Directory Traversal Vulnerability
TIBCO Software · TIBCO JasperReports Server · TIBCO JasperReports Server for ActiveMatrix BPM · TIBCO JasperReports Server for AWS Marketplace

EPSS 2.4%
Critical 9.8
CVE-2022-0748 Arbitrary Code Execution
EPSS 2.1%

All 30 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Unscored
CVE-2022-0169 Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection
EPSS 75%
High 7.5
CVE-2022-0778 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
OpenSSL · OpenSSL

EPSS 73%
Unscored
CVE-2021-45010 A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid us…
EPSS 70%
Unscored
CVE-2022-22719 mod_lua Use of uninitialized value of in r:parsebody
Apache Software Foundation · Apache HTTP Server

EPSS 70%
Unscored
CVE-2021-25003 WPCargo < 6.9.0 - Unauthenticated RCE
EPSS 56%
Unscored
CVE-2022-25487 Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.
EPSS 54%
Unscored
CVE-2022-23943 mod_sed: Read/write beyond bounds
Apache Software Foundation · Apache HTTP Server

EPSS 50%
Unscored
CVE-2022-22721 core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody
Apache Software Foundation · Apache HTTP Server

EPSS 42%

Advisories

USN-5321-2 firefox vulnerabilities 7 CVEs
SUSE-SU-2022:0822-1 Security update for MozillaFirefox 5 CVEs
SUSE-SU-2022:0821-1 Security update for MozillaFirefox 5 CVEs
openSUSE-SU-2022:0821-1 Security update for MozillaFirefox 5 CVEs
SUSE-SU-2022:0819-1 Security update for MozillaFirefox 5 CVEs
SUSE-SU-2022:0832-1 Security update for glibc 4 CVEs
SUSE-SU-2022:0844-1 Security update for expat 1 CVEs
openSUSE-SU-2022:0844-1 Security update for expat 1 CVEs
SUSE-SU-2022:0842-1 Security update for expat 1 CVEs