Week 14, 2022
4–10 April 2022
Newly exploited 7
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
Critical 9.8
CVE-2021-31166 KEV Apr 6, 2022 HTTP Protocol Stack Remote Code Execution VulnerabilityEPSS 100%
Microsoft · Windows 10 Version 20H2 · Windows Server version 20H2 · Windows 10 Version 2004
-
High 8.1
CVE-2017-0148 KEV Apr 6, 2022 · ransomware The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…EPSS 99%
-
High 7.8
CVE-2021-3156 KEV Apr 6, 2022 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" a…EPSS 100%
-
Critical 9.8
CVE-2021-45382 KEV Apr 4, 2022 A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via th…EPSS 98%
- Critical 9.8 EPSS 100%
-
High 7.8
CVE-2022-22675 KEV Apr 4, 2022 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 1…EPSS 12%
Apple · macOS · iOS and iPadOS · watchOS
-
Medium 5.5
CVE-2022-22674 KEV Apr 4, 2022 An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macO…EPSS 1.1%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.1
CVE-2022-1162 A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8 pr…EPSS 76%
- Critical 9.8 EPSS 43%
- Critical 9.8 EPSS 4.2%
-
Critical 9.0
CVE-2022-20755 Cisco Expressway Series and Cisco TelePresence Video Communication Server VulnerabilitiesEPSS 3.3%
Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway
-
Critical 9.0
CVE-2022-20754 Cisco Expressway Series and Cisco TelePresence Video Communication Server VulnerabilitiesEPSS 3.3%
Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway
- Critical 9.8 EPSS 2.1%
- Critical 9.1 EPSS 1.8%
- Critical 9.3 EPSS 1.8%
- Critical 9.0 EPSS 1.7%
-
Critical 9.8
CVE-2021-26114 Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to e…EPSS 1.6%
- Critical 9.8 EPSS 1.4%
- Critical 9.3 EPSS 1.3%
-
Critical 9.8
CVE-2021-32986 Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or ChannelEPSS 1.1%
-
Critical 9.8
CVE-2021-32984 Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or ChannelEPSS 1.1%
-
Critical 9.8
CVE-2021-32980 Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or ChannelEPSS 1.1%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2022-28219 Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.EPSS 97%
-
Unscored
CVE-2021-30497 Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed…EPSS 97%
-
High 8.7
CVE-2022-1190 Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to exploit a s…EPSS 88%
-
High 8.7
CVE-2022-1175 Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14…EPSS 82%
-
Unscored
CVE-2021-46419 An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts.EPSS 71%
-
Unscored
CVE-2021-46417 Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri C…EPSS 60%
-
Unscored
CVE-2021-46367 RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. An authenticated attacker can upload a PHP file and bypa…EPSS 30%
-
Unscored
CVE-2021-46418 An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.EPSS 24%
Advisories
- SUSE / openSUSE Security Updates 272 critical
- BSI CERT-Bund (WID) 15
- Debian Security (DSA / DLA) 14
- Oracle Linux Security Advisories (ELSA) 11
- Ubuntu Security Notices (USN) 62 critical
- Amazon Linux Security Center (ALAS) 6
- CISA ICS & IT advisories 51 critical
- CERT@VDE 21 critical
- Rocky Linux Security Advisories 1
- AlmaLinux Security Advisories 1
- openSUSE-SU-2022:0110-1 Security update for opera 241 CVEs
- USN-5368-1 linux-azure-5.13, linux-oracle-5.13 vulnerabilities 23 CVEs
- ICSA-22-097-01 Pepperl+Fuchs WirelessHART-Gateway 19 CVEs
- VDE-2022-008 WEIDMUELLER: Multiple vulnerabilities in Modbus TCP/RTU Gateways 9 CVEs
- USN-5365-1 h2database vulnerabilities 2 CVEs
- SUSE-SU-2022:14937-1 Security update for openvpn-openssl1 1 CVEs