Week 28, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-26352 An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose filename is n…
  EPSS 91%
• Critical 9.1
  CVE-2022-32214 llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields

  Node.js · node

  EPSS 82%
• Critical 9.1
  CVE-2022-32213 llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding

  Node.js · node

  EPSS 45%
• Critical 10.0
  CVE-2022-31161 Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload

  hap-wi · roxy-wi

  EPSS 29%
• Critical 9.8
  CVE-2022-35628 SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
  EPSS 27%
• Critical 9.8
  CVE-2021-36711 Octobot mishandles Tentacles upload
  EPSS 17%
• Critical 9.8
  CVE-2022-2302 LENZE: Missing password verification in authorisation procedure

  Lenze · cabinet c520 · cabinet c750 · cabinet c550

  EPSS 2.2%
• Critical 10.0
  CVE-2022-34819 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All…

  Siemens · SIMATIC CP 1243-8 IRC · SIMATIC CP 1542SP-1 IRC · SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL

  EPSS 2.1%
• Critical 9.3
  CVE-2022-31507 Ganga allows absolute path traversal
  EPSS 1.7%
• Critical 9.3
  CVE-2022-31506 SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely
  EPSS 1.5%
• Critical 9.3
  CVE-2022-31573 ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
  EPSS 1.4%
• Critical 9.6
  CVE-2022-26649 A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (Al…

  Siemens · SCALANCE X204-2TS · SCALANCE X216 · SCALANCE X202-2P IRT PRO

  EPSS 1.4%
• Critical 9.9
  CVE-2022-1025 Improper access control allows admin privilege escalation in Argo CD
  EPSS 1.3%
• Critical 9.3
  CVE-2022-31558 Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely
  EPSS 1.3%
• Critical 9.8
  CVE-2022-1737 Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write

  Pyramid Solutions · EtherNet/IP Scanner DLL Kit (EIPS) · EtherNet/IP Adapter Development Kit (EADK) · EtherNet/IP Adapter DLL Kit (EIPA)

  EPSS 1.3%

All 16 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.8
  CVE-2022-30216 Windows Server Service Tampering Vulnerability

  Microsoft · Windows Server 2022 · Windows 10 Version 21H2 · Windows 11 version 21H2

  EPSS 88%
• High 8.8
  CVE-2022-34753 A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote root exploit …

  Schneider Electric · SpaceLogic C-Bus Home Controller

  EPSS 71%
• Unscored
  CVE-2022-32215 The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead…

  Node.js · node

  EPSS 70%
• High 7.3
  CVE-2022-31097 Stored XSS in Grafana's Unified Alerting

  Grafana · Grafana

  EPSS 70%
• Unscored
  CVE-2022-32417 PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.
  EPSS 35%
• High 7.5
  CVE-2022-22025 Windows Internet Information Services Cachuri Module Denial of Service Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 33%
• Unscored
  CVE-2022-1952 eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
  EPSS 25%
• Unscored
  CVE-2022-26482 An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin.
  EPSS 23%