Week 35, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2022-32548 An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via t…
  EPSS 34%
• Critical 9.8
  CVE-2022-34668 NVFLARE unsafe deserialization due to Pickle

  NVIDIA · NVIDIA FLARE

  EPSS 12%
• Critical 9.8
  CVE-2022-21165 Arbitrary Command Injection
  EPSS 3.1%
• Critical 9.8
  CVE-2022-37021 Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8.

  Apache Software Foundation · Apache Geode

  EPSS 2.6%
• Critical 9.8
  CVE-2022-38054 Session Fixation

  Apache Software Foundation · Apache Airflow

  EPSS 2.2%
• Critical 10.0
  CVE-2022-21941 iSTAR Ultra

  Johnson Controls · iSTAR Ultra

  EPSS 2.1%
• Critical 9.8
  CVE-2022-2466 Quarkus does not terminate HTTP requests header context
  EPSS 1.9%
• Critical 9.8
  CVE-2022-25644 Arbitrary Code Execution
  EPSS 1.6%
• Critical 9.0
  CVE-2022-36045 Account takeover via cryptographically weak PRNG in NodeBB Forum

  NodeBB · NodeBB

  EPSS 1.3%
• Critical 9.8
  CVE-2022-34372 Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially ac…

  Dell · Cyber Recovery

  EPSS 1.3%
• Critical 9.8
  CVE-2022-38116 Le-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password

  Le-yan · Personnel and Salary Management System

  EPSS 1.2%
• Critical 9.4
  CVE-2022-34379 Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory u…

  Dell · CloudLink

  EPSS 1%
• Critical 9.6
  CVE-2022-2485 AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information

  Automation Direct · SIO-MB16CDD2 · SIO- MB04ADS · SIO-MB08ADS-1

• Critical 9.8
  CVE-2022-22096 Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Sna…

  Qualcomm · Snapdragon Connectivity, Snapdragon Mobile

• Critical 9.3
  CVE-2022-34380 Dell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate Path or Channel Vulnerability. A high privileged local attack…

  Dell · CloudLink

All 17 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2022-36553 Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi.
  EPSS 97%
• Unscored
  CVE-2022-38772 Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126…
  EPSS 78%
• Unscored
  CVE-2022-25813 Server-Side Template Injection affecting the ecommerce plugin of Apache OFBiz

  Apache Software Foundation · Apache OFBiz

  EPSS 67%
• Unscored
  CVE-2022-37130 In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnu…
  EPSS 27%
• Unscored
  CVE-2022-36620 D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.
  EPSS 24%
• Unscored
  CVE-2022-37122 Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrar…
  EPSS 24%
• Unscored
  CVE-2022-37128 In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.
  EPSS 22%
• Unscored
  CVE-2022-1552 A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The A…
  EPSS 17%