Week 15, 2022

11–17 April 2022

New CVEs: 757
Critical: 45
High: 215
Newly exploited: 28
Advisories: 247
Malicious pkgs: 0

Newly exploited 28

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2007-3010 KEV Apr 15, 2022 masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary comm…
EPSS 97%
Critical 9.8
CVE-2014-0780 KEV Apr 15, 2022 InduSoft Web Studio Path Traversal
InduSoft · Web Studio

EPSS 75%
Critical 9.8
CVE-2019-3929 KEV Apr 15, 2022 The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmwar…
Crestron · Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4.

EPSS 99%
Critical 9.8
CVE-2018-7841 KEV Apr 15, 2022 A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of char…
U.motion · U.motion Builder software version 1.3.4

EPSS 72%
Critical 9.8
CVE-2019-16057 KEV Apr 15, 2022 · ransomware The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.
EPSS 86%
Critical 9.8
CVE-2010-5330 KEV Apr 15, 2022 On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demo…
EPSS 40%
High 8.8
CVE-2022-1364 KEV Apr 15, 2022 Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Google · Chrome

EPSS 14%
High 7.8
CVE-2022-22960 KEV Apr 15, 2022 VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scrip…
EPSS 36%
High 7.5
CVE-2016-4523 KEV Apr 15, 2022 The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read …
EPSS 31%
Critical 9.8
CVE-2022-22954 KEV Apr 14, 2022 · ransomware VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with ne…
EPSS 100%
Critical 9.8
CVE-2018-20753 KEV Apr 13, 2022 · ransomware Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all m…
EPSS 30%
High 8.8
CVE-2015-2502 KEV Apr 13, 2022 Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web s…
EPSS 51%
High 8.1
CVE-2018-7602 KEV Apr 13, 2022 · ransomware Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
Drupal · Core

EPSS 99%
High 7.8
CVE-2015-5123 KEV Apr 13, 2022 Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS…
EPSS 19%
High 7.8
CVE-2015-5122 KEV Apr 13, 2022 Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and…
EPSS 87%
High 7.8
CVE-2022-24521 KEV Apr 13, 2022 · ransomware Windows Common Log File System Driver Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 7.1%
High 7.8
CVE-2014-9163 KEV Apr 13, 2022 Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux al…
EPSS 45%
High 7.8
CVE-2015-0313 KEV Apr 13, 2022 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Lin…
EPSS 95%
High 7.8
CVE-2015-3113 KEV Apr 13, 2022 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux…
EPSS 100%
High 7.8
CVE-2015-0311 KEV Apr 13, 2022 Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on …
EPSS 86%
Critical 9.8
CVE-2021-27852 KEV Apr 11, 2022 Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This…
Checkbox · Survey

EPSS 30%
Critical 9.8
CVE-2017-11317 KEV Apr 11, 2022 Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attack…
EPSS 84%
Critical 9.8
CVE-2020-2509 KEV Apr 11, 2022 Command Injection Vulnerability in QTS and QuTS hero
QNAP Systems · QTS · QuTS hero

EPSS 34%
High 8.8
CVE-2022-23176 KEV Apr 11, 2022 WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via expos…
EPSS 11%
High 7.8
CVE-2021-39793 KEV Apr 11, 2022 In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalati…
High 7.5
CVE-2021-42287 KEV Apr 11, 2022 · ransomware Active Directory Domain Services Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2022

EPSS 77%
High 7.5
CVE-2021-42278 KEV Apr 11, 2022 · ransomware Active Directory Domain Services Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2022

EPSS 73%
Medium 6.6
CVE-2021-22600 KEV Apr 11, 2022 Double Free in net/packet/af_packet.c leading to priviledge escalation
Linux kernel · kernel

EPSS 6.6%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2022-22954 VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with ne…
EPSS 100%
Critical 10.0
CVE-2022-24816 Improper Control of Generation of Code in jai-ext
geosolutions-it · jai-ext

EPSS 100%
Critical 9.8
CVE-2022-26809 Remote Procedure Call Runtime Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 91%
Critical 9.8
CVE-2021-31805 Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE.
Apache Software Foundation · Apache Struts

EPSS 85%
Critical 9.1
CVE-2022-21145 A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request…
Lansweeper · lansweeper

EPSS 78%
Critical 9.1
CVE-2022-22149 A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cau…
Lansweeper · lansweeper

EPSS 73%
Critical 9.1
CVE-2022-21234 An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL in…
Lansweeper · lansweeper

EPSS 73%
Critical 9.8
CVE-2022-24497 Windows Network File System Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 35%
Critical 9.8
CVE-2022-24491 Windows Network File System Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 33%
Critical 9.8
CVE-2022-27115 RCE in Studio-42 elFinder on Windows before 2.1.61
EPSS 29%
Critical 10.0
CVE-2022-20695 Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability
Cisco · Cisco Wireless LAN Controller (WLC)

EPSS 20%
Critical 9.8
CVE-2022-28346 SQL Injection in Django
EPSS 19%
Critical 10.0
CVE-2021-40422 An authentication bypass vulnerability exists in the device password generation functionality of Swift Sensors Gateway SG3-1010. A specially-crafted network re…
Swift Sensors · Swift Sensors Gateway

EPSS 6.2%
Critical 10.0
CVE-2022-1161 ICSA-22-090-05 Rockwell Automation Logix Controllers
Rockwell Automation · Compact GuardLogix 5370 controllers · CompactLogix 5380 controllers · ControlLogix 5570 controllers

EPSS 5.2%
Critical 9.8
CVE-2022-27139 Arbitrary file upload in Ghost
EPSS 4%

All 45 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

VDE-2022-010 PHOENIX CONTACT: Multiple Linux component vulnerabilities fixed in latest AXC F x152 LTS release 60 CVEs
SSA-836527 SSA-836527: Multiple Vulnerabilities in SCALANCE X-300 Switch Family Devices 9 CVEs
ICSA-22-104-09 Siemens SCALANCE X-300 Switches 9 CVEs
ICSA-22-102-05 Aethon TUG Home Base Server 5 CVEs
ICSA-22-104-03 Red Lion DA50N 3 CVEs
SUSE-SU-2022:1184-1 Security update for netatalk 3 CVEs
SSA-655554 SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1 3 CVEs
ICSA-22-104-11 Siemens SIMATIC Energy Manager 3 CVEs
USN-5373-1 python-django vulnerabilities 3 CVEs
SEVD-2022-102-01 IGSS (Interactive Graphical SCADA System) 2 CVEs