Week 19, 2022
9–15 May 2022
Newly exploited 1
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
Critical 9.8
CVE-2022-1388 KEV May 10, 2022 · ransomware On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all …EPSS 100%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2022-30525 A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.…EPSS 100%
Zyxel · ATP series firmware · VPN series Firmware · USG FLEX 50(W) firmware
-
Critical 9.8
CVE-2022-30333 RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a…EPSS 99%
-
Critical 9.8
CVE-2022-29303 SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.EPSS 98%
-
Critical 9.8
CVE-2022-26937 Windows Network File System Remote Code Execution VulnerabilityEPSS 76%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2022
-
Critical 9.9
CVE-2022-26085 An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can …EPSS 13%
-
Critical 9.9
CVE-2022-26042 An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request c…EPSS 8.6%
- Critical 9.8 EPSS 6.9%
-
Critical 9.9
CVE-2022-26420 An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of …EPSS 5.9%
-
Critical 9.9
CVE-2022-26075 An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of …EPSS 5.9%
-
Critical 9.1
CVE-2022-26007 An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request ca…EPSS 5.4%
-
Critical 9.9
CVE-2022-26518 An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of n…EPSS 4.9%
-
Critical 9.8
CVE-2022-22012 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 4.2%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Critical 9.8
CVE-2022-29130 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityEPSS 3.9%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Critical 9.1
CVE-2022-26002 A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network requ…EPSS 3.4%
-
Critical 9.9
CVE-2022-26782 Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-craf…EPSS 3.3%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 8.8
CVE-2022-26923 Active Directory Domain Services Elevation of Privilege VulnerabilityEPSS 84%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
High 8.1
CVE-2022-21972 Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityEPSS 79%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
- High 7.5 EPSS 73%
-
High 8.1
CVE-2022-23270 Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityEPSS 70%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Unscored
CVE-2022-29847 In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would all…EPSS 58%
- Unscored EPSS 56%
-
Unscored
CVE-2022-29383 NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platfo…EPSS 49%
-
Unscored
CVE-2022-29298 SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.EPSS 47%
Advisories
- AlmaLinux Security Advisories 365
- Microsoft Security Response Center 786 critical
- Rocky Linux Security Advisories 56
- BSI CERT-Bund (WID) 322 critical
- SUSE / openSUSE Security Updates 311 critical
- CISA ICS & IT advisories 214 critical
- Ubuntu Security Notices (USN) 161 critical
- Debian Security (DSA / DLA) 151 critical
- Siemens ProductCERT 122 critical
- Oracle Linux Security Advisories (ELSA) 10
- Schneider Electric CPCERT 31 critical
- CERT@VDE 11 critical
- SSA-165073 SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices 11 CVEs
- ICSA-22-132-07 Siemens SICAM P850 and SICAM P855 11 CVEs
- ICSA-22-132-10 Siemens Desigo PXC and DXR Devices 8 CVEs
- ICSA-22-132-02 Mitsubishi Electric MELSOFT iQ AppPortal 8 CVEs
- USN-5411-1 firefox vulnerabilities 8 CVEs
- ICSA-22-132-04 Cambium Networks cnMaestro 7 CVEs
- SSA-626968 SSA-626968: Multiple Webserver Vulnerabilities in Desigo PXC and DXR Devices 7 CVEs
- SEVD-2022-130-03 Wiser Smart 6 CVEs
- SUSE-RU-2022:1579-1 Recommended update for MozillaFirefox 6 CVEs
- VDE-2022-018 PHOENIX CONTACT: Multiple vulnerabilities in RAD-ISM-900-EN-BD devices 2 CVEs