Week 32, 2022

8–14 August 2022

New CVEs: 579
Critical: 15
High: 117
Newly exploited: 4
Advisories: 261
Malicious pkgs: 18

Newly exploited 4

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2022-37042 KEV Aug 11, 2022 · ransomware Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authenticatio…
EPSS 92%
High 7.2
CVE-2022-27925 KEV Aug 11, 2022 · ransomware Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with a…
EPSS 99%
Critical 9.8
CVE-2022-30333 KEV Aug 9, 2022 · ransomware RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a…
EPSS 99%
High 7.8
CVE-2022-34713 KEV Aug 9, 2022 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 68%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.6
CVE-2022-2733 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Open-Emr · openemr/openemr

EPSS 96%
Critical 9.8
CVE-2022-37042 Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authenticatio…
EPSS 92%
Critical 9.8
CVE-2022-34715 Windows Network File System Remote Code Execution Vulnerability
Microsoft · Windows Server 2022

EPSS 80%
Critical 9.0
CVE-2022-20841 Cisco Small Business RV Series Routers Vulnerabilities
Cisco · Cisco Small Business RV Series Router Firmware

EPSS 3.4%
Critical 9.8
CVE-2022-30133 Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 2.8%
Critical 9.6
CVE-2022-33649 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft · Microsoft Edge (Chromium-based)

EPSS 2.4%
Critical 9.0
CVE-2022-20827 Cisco Small Business RV Series Routers Vulnerabilities
Cisco · Cisco Small Business RV Series Router Firmware

EPSS 2%
Critical 9.1
CVE-2022-36323 Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or sp…
Siemens · SCALANCE S615 LAN-Router · SCALANCE M826-2 SHDSL-Router · SCALANCE M874-3

EPSS 1.9%
Critical 9.0
CVE-2022-20842 Cisco Small Business RV Series Routers Vulnerabilities
Cisco · Cisco Small Business RV Series Router Firmware

EPSS 1.9%
Critical 9.8
CVE-2022-2242 KUKA V/KSS WoV SH access control vulnerability
KUKA · SystemSoftware V/KSS

EPSS 1.2%
Critical 10.0
CVE-2022-2634 Digi ConnectPort X2D
Digi · ConnectPort X2D

EPSS 1%
Critical 9.6
CVE-2022-28755 Improper URL parsing in Zoom Clients
Zoom Video Communications · Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) · Zoom VDI Windows Meeting Clients
Critical 10.0
CVE-2022-2734 Improper Restriction of Rendered UI Layers or Frames in openemr/openemr
Open-Emr · openemr/openemr
Critical 9.1
CVE-2022-35293 Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker…
SAP · SAP Enable Now Manager
Critical 9.3
CVE-2022-35942 loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter
loopbackio · loopback-connector-postgresql

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

VDE-2022-032 AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service 73 CVEs
ICSA-22-223-03 Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70 13 CVEs
USN-5182-1 roundcube vulnerabilities 12 CVEs
ICSA-22-223-07 Siemens SCALANCE 3 CVEs
SSA-710008 SSA-710008: Multiple Web Vulnerabilities in SCALANCE Products 3 CVEs
ICSA-22-221-03 Emerson OpenBSI 2 CVEs
ICSA-22-223-06 Siemens SICAM TOOLBOX II 1 CVEs
SEVD-2022-221-01 EcoStruxureTM Control Expert, EcoStruxureTM Process Expert, and Modicon Controllers M580 and M340 1 CVEs
MSRC-CVE-2022-35752 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 1 CVEs
MSRC-CVE-2022-35753 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 1 CVEs