Week 12, 2022

21–27 March 2022

New CVEs: 326
Critical: 29
High: 51
Newly exploited: 60
Advisories: 82
Malicious pkgs: 0

Newly exploited 60

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 10.0
CVE-2020-2021 KEV Mar 25, 2022 · ransomware PAN-OS: Authentication Bypass in SAML Authentication
Palo Alto Networks · PAN-OS

EPSS 4.4%
Critical 9.9
CVE-2019-1003030 KEV Mar 25, 2022 Sandbox bypass in Jenkins Pipeline: Groovy Plugin
Jenkins Project · Jenkins Pipeline: Groovy Plugin

EPSS 97%
Critical 9.8
CVE-2019-16920 KEV Mar 25, 2022 Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an …
EPSS 100%
Critical 9.8
CVE-2018-0125 KEV Mar 25, 2022 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote …
EPSS 55%
Critical 9.8
CVE-2017-6316 KEV Mar 25, 2022 Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBri…
EPSS 73%
Critical 9.8
CVE-2018-1273 KEV Mar 25, 2022 · ransomware Spring Data Commons remote code injection vulnerability
Spring by Pivotal · Spring Framework

EPSS 97%
Critical 9.8
CVE-2010-4344 KEV Mar 25, 2022 Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session…
EPSS 72%
Critical 9.8
CVE-2015-1427 KEV Mar 25, 2022 Improper Access Control in Elasticsearch
EPSS 100%
Critical 9.8
CVE-2018-11138 KEV Mar 25, 2022 · ransomware The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to e…
EPSS 92%
Critical 9.8
CVE-2021-42237 KEV Mar 25, 2022 · ransomware Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command …
EPSS 97%
Critical 9.8
CVE-2018-14839 KEV Mar 25, 2022 LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.
EPSS 89%
Critical 9.8
CVE-2005-2773 KEV Mar 25, 2022 HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to c…
EPSS 74%
Critical 9.8
CVE-2020-7247 KEV Mar 25, 2022 smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via …
EPSS 99%
Critical 9.8
CVE-2015-1187 KEV Mar 25, 2022 The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
EPSS 83%
Critical 9.8
CVE-2017-3881 KEV Mar 25, 2022 A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote at…
EPSS 99%
Critical 9.8
CVE-2016-1555 KEV Mar 25, 2022 (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP2…
EPSS 98%
Critical 9.8
CVE-2018-0147 KEV Mar 25, 2022 A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote at…
EPSS 18%
Critical 9.8
CVE-2014-6287 KEV Mar 25, 2022 The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbit…
EPSS 99%
Critical 9.8
CVE-2020-25223 KEV Mar 25, 2022 A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11
EPSS 97%
Critical 9.8
CVE-2012-1823 KEV Mar 25, 2022 sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lac…
EPSS 100%
Critical 9.8
CVE-2019-12989 KEV Mar 25, 2022 Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.
EPSS 95%
Critical 9.8
CVE-2009-1151 KEV Mar 25, 2022 Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP co…
EPSS 97%
Critical 9.8
CVE-2019-10068 KEV Mar 25, 2022 An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security…
EPSS 95%
Critical 9.8
CVE-2013-4810 KEV Mar 25, 2022 HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to ex…
EPSS 79%
Critical 9.8
CVE-2016-10174 KEV Mar 25, 2022 The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflo…
EPSS 83%
Critical 9.8
CVE-2013-2251 KEV Mar 25, 2022 Code injection in Apache Struts
EPSS 100%
Critical 9.8
CVE-2022-26143 KEV Mar 25, 2022 The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive i…
EPSS 87%
Critical 9.8
CVE-2020-9054 KEV Mar 25, 2022 ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
Zyxel · NSA210 · NSA221 · NSA320

EPSS 100%
Critical 9.8
CVE-2021-22941 KEV Mar 25, 2022 · ransomware Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zo…
EPSS 54%
Critical 9.8
CVE-2019-15107 KEV Mar 25, 2022 · ransomware An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.
EPSS 100%
Critical 9.8
CVE-2022-26318 KEV Mar 25, 2022 On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7…
EPSS 78%
Critical 9.1
CVE-2015-4068 KEV Mar 25, 2022 Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via …
EPSS 64%
High 8.8
CVE-2019-12991 KEV Mar 25, 2022 Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).
EPSS 74%
High 8.8
CVE-2018-8414 KEV Mar 25, 2022 A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerabili…
Microsoft · Windows 10 · Windows 10 Servers

EPSS 73%
High 8.8
CVE-2020-1631 KEV Mar 25, 2022 Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services
Juniper Networks · Junos OS

EPSS 4.9%
High 8.8
CVE-2014-6324 KEV Mar 25, 2022 The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows …
EPSS 87%
High 8.8
CVE-2016-7892 KEV Mar 25, 2022 Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successfu…
EPSS 19%
High 8.8
CVE-2019-0903 KEV Mar 25, 2022 A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code E…
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems

EPSS 22%
High 8.8
CVE-2017-0146 KEV Mar 25, 2022 · ransomware The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…
Microsoft · Windows SMB

EPSS 90%
High 8.8
CVE-2020-1956 KEV Mar 25, 2022 Command Injection in Kylin
Apache · Kylin

EPSS 98%
High 8.8
CVE-2017-6334 KEV Mar 25, 2022 dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metachara…
EPSS 73%
High 8.8
CVE-2020-9377 KEV Mar 25, 2022 D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer s…
EPSS 22%
High 8.8
CVE-2014-6332 KEV Mar 25, 2022 OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows…
EPSS 95%
High 8.8
CVE-2009-0927 KEV Mar 25, 2022 Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary co…
EPSS 97%
High 8.7
CVE-2019-11043 KEV Mar 25, 2022 · ransomware Underflow in PHP-FPM can lead to RCE
PHP Group · PHP

EPSS 100%
High 8.1
CVE-2014-3120 KEV Mar 25, 2022 Elasticsearch Improper Access Control vulnerability
EPSS 89%
High 8.1
CVE-2017-12617 KEV Mar 25, 2022 Unrestricted Upload of File with Dangerous Type Apache Tomcat
Apache Software Foundation · Apache Tomcat

EPSS 100%
High 8.1
CVE-2017-12615 KEV Mar 25, 2022 · ransomware When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
Apache Software Foundation · Apache Tomcat

EPSS 100%
High 8.1
CVE-2019-6340 KEV Mar 25, 2022 Drupal core - Highly critical - Remote Code Execution
Drupal · Drupal core

EPSS 92%
High 8.1
CVE-2018-6961 KEV Mar 25, 2022 VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled…
VMware · NSX SD-WAN by VeloCloud

EPSS 85%
High 7.8
CVE-2016-4171 KEV Mar 25, 2022 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in t…
EPSS 20%
High 7.8
CVE-2010-4345 KEV Mar 25, 2022 Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with …
EPSS 18%
High 7.8
CVE-2022-21999 KEV Mar 25, 2022 · ransomware Windows Print Spooler Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 41%
High 7.5
CVE-2015-0666 KEV Mar 25, 2022 Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbit…
EPSS 40%
High 7.5
CVE-2015-3035 KEV Mar 25, 2022 Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware befo…
EPSS 84%
High 7.5
CVE-2018-8373 KEV Mar 25, 2022 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory …
Microsoft · Internet Explorer 11 · Internet Explorer 10 · Internet Explorer 9

EPSS 62%
High 7.5
CVE-2010-3035 KEV Mar 25, 2022 Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a de…
EPSS 5.7%
High 7.5
CVE-2020-5410 KEV Mar 25, 2022 Directory Traversal with spring-cloud-config-server
Spring by VMware · Spring Cloud Config

EPSS 96%
High 7.5
CVE-2014-0130 KEV Mar 25, 2022 actionpack Path Traversal vulnerability
EPSS 54%
High 7.5
CVE-2010-2861 KEV Mar 25, 2022 · ransomware Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files …
EPSS 100%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2022-1040 An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
Sophos · Sophos Firewall

EPSS 100%
Critical 9.8
CVE-2022-26258 D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
EPSS 92%
Critical 9.9
CVE-2022-0415 Remote Command Execution in uploading repository file in gogs/gogs
Gogs · gogs/gogs

EPSS 66%
Critical 9.1
CVE-2022-26960 Path Traversal in Studio-42 elFinder through 2.1.60
EPSS 51%
Critical 9.8
CVE-2022-0888 Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
Saturday Drive · Ninja Forms - File Uploads

EPSS 39%
Critical 9.8
CVE-2022-26245 SQLinjection in falcon-plus
EPSS 14%
Critical 10.0
CVE-2021-27472 Rockwell Automation FactoryTalk AssetCentre SQL Injection
Rockwell Automation · FactoryTalk® AssetCentre

EPSS 5.7%
Critical 10.0
CVE-2021-27476 Rockwell Automation FactoryTalk AssetCentre OS Command Injection
Rockwell Automation · FactoryTalk® AssetCentre

EPSS 4.1%
Critical 10.0
CVE-2021-27466 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data
Rockwell Automation · FactoryTalk® AssetCentre

EPSS 3.9%
Critical 10.0
CVE-2021-27470 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data
Rockwell Automation · FactoryTalk® AssetCentre

EPSS 3.8%
Critical 10.0
CVE-2021-27462 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data
Rockwell Automation · FactoryTalk® AssetCentre

EPSS 3.8%
Critical 10.0
CVE-2021-27468 Rockwell Automation FactoryTalk AssetCentre SQL Injection
Rockwell Automation · FactoryTalk® AssetCentre

EPSS 3.5%
Critical 10.0
CVE-2021-27464 Rockwell Automation FactoryTalk AssetCentre SQL Injection
Rockwell Automation · FactoryTalk® AssetCentre

EPSS 3.5%
Critical 10.0
CVE-2021-27460 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data
Rockwell Automation · FactoryTalk® AssetCentre

EPSS 3.2%
Critical 9.6
CVE-2021-26622 Genian NAC remote code execution vulnerability
Genians · Genian NAC V5.0 & Genian NAC Suite V5.0 · Genian NAC Suite V4.0

EPSS 3%

All 29 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

ICSA-22-081-01 Delta Electronics DIAEnergie (Update C) 29 CVEs
USN-5337-1 linux, linux-aws, linux-aws-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-kvm, linux-oracle, linux-raspi vulnerabilities 21 CVEs
USN-5345-1 thunderbird vulnerabilities 13 CVEs
DLA-2961-1 thunderbird - security update 5 CVEs
SUSE-SU-2022:14923-1 Security update for glibc 5 CVEs
openSUSE-SU-2022:0906-1 Security update for MozillaThunderbird 5 CVEs
SUSE-SU-2022:0906-1 Security update for MozillaThunderbird 5 CVEs
DSA-5106-1 thunderbird - security update 5 CVEs
SUSE-SU-2022:0909-1 Security update for glibc 3 CVEs
VDE-2022-007 PHOENIX CONTACT: Path Traversal in Library of PLCnext Technology Toolchain and FL Network Manager 2 CVEs