Week 24, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-30136 Windows Network File System Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2016

  EPSS 73%
• Critical 9.8
  CVE-2022-33174 Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the …
  EPSS 14%
• Critical 9.8
  CVE-2022-1768 RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection

  David F. Carr · RSVPMaker

  EPSS 13%
• Critical 9.8
  CVE-2022-20825 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

  Cisco · Cisco Small Business RV Series Router Firmware

  EPSS 3.4%
• Critical 9.8
  CVE-2021-37404 Heap buffer overflow in libhdfs native library

  Apache Software Foundation · Apache Hadoop

  EPSS 3.1%
• Critical 9.8
  CVE-2022-30309 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

  Festo · Controller CECC-X-M1-Y-YJKP (4803891) · Controller CECC-X-M1 (8124922) · Servo Press Kit YJKP- (8058596)

  EPSS 3%
• Critical 9.8
  CVE-2022-30308 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

  Festo · Controller CECC-X-M1-MV-S1 (8124924) · Controller CECC-X-M1-YS-L2 (8082794) · Controller CECC-X-M1 (4407603)

  EPSS 3%
• Critical 9.8
  CVE-2022-30311 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

  Festo · Controller CECC-X-M1-MV (8124923) · Controller CECC-X-M1-MV-S1 (8124924) · Controller CECC-X-M1-YS-L2 (8082794)

  EPSS 2.7%
• Critical 9.8
  CVE-2022-30310 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

  Festo · Controller CECC-X-M1 (8124922) · Servo Press Kit YJKP- (8058596) · Controller CECC-X-M1-MV (8124923)

  EPSS 2.7%
• Critical 10.0
  CVE-2022-21806 A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network p…

  Anker · Eufy Homebase 2

  EPSS 2.5%
• Critical 9.0
  CVE-2022-29496 A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1. A specially-crafted network request…

  Blynk · Blynk-Library

  EPSS 2.2%
• Critical 9.8
  CVE-2022-33175 Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions setting on the user.token field that is acc…
  EPSS 1.7%
• Critical 9.8
  CVE-2022-20798 Cisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass Vulnerability

  Cisco · Cisco Email Security Appliance (ESA)

  EPSS 1.6%
• Critical 9.0
  CVE-2022-32158 Splunk Enterprise deployment servers allow client publishing of forwarder bundles

  Splunk · Splunk Enterprise

  EPSS 1.5%
• Critical 9.1
  CVE-2022-2062 Generation of Error Message Containing Sensitive Information in nocodb/nocodb

  nocodb · nocodb/nocodb

  EPSS 1.5%

All 35 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 6.1
  CVE-2022-1707 Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search

  duracelltomi · GTM4WP – A Google Tag Manager (GTM) plugin for WordPress

  EPSS 89%
• High 7.5
  CVE-2022-31626 mysqlnd/pdo password buffer overflow

  PHP Group · PHP

  EPSS 58%
• Unscored
  CVE-2022-24562 In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-s…
  EPSS 54%
• Unscored
  CVE-2022-30023 Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
  EPSS 39%
• Unscored
  CVE-2022-31446 Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteF…
  EPSS 35%
• Medium 6.1
  CVE-2022-29034 A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected …

  Siemens · SINEMA Remote Connect Server

  EPSS 29%
• Unscored
  CVE-2022-0863 WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)
  EPSS 24%
• Medium 4.7
  CVE-2022-29455 WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability

  Elementor · Elementor Website Builder (WordPress plugin)

  EPSS 24%