Week 44, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-40471 Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in …
  EPSS 28%
• Critical 9.8
  CVE-2022-41772 Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path travers…

  Delta Electronics · InfraSuite Device Master

  EPSS 25%
• Critical 9.8
  CVE-2022-41657 Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operatio…

  Delta Electronics · InfraSuite Device Master

  EPSS 21%
• Critical 9.8
  CVE-2022-38142 Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without…

  Delta Electronics · InfraSuite Device Master

  EPSS 19%
• Critical 9.8
  CVE-2022-3254 AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
  EPSS 6.6%
• Critical 9.8
  CVE-2022-31692 Spring Security authorization rules can be bypassed via forward or include dispatcher types
  EPSS 4.2%
• Critical 9.8
  CVE-2022-43109 D-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers…
  EPSS 3.7%
• Critical 9.8
  CVE-2022-31691 Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloud…
  EPSS 3.4%
• Critical 9.8
  CVE-2020-21016 D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php.
  EPSS 2.7%
• Critical 9.8
  CVE-2022-42808 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9…

  Apple · macOS · watchOS · tvOS

  EPSS 2.7%
• Critical 9.8
  CVE-2022-39344 Azure RTOS USBX vulnerable to buffer overflow

  azure-rtos · usbx

  EPSS 2.7%
• Critical 9.1
  CVE-2022-42905 In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS 1.3 client or network attacker can trigger a …
  EPSS 2.5%
• Critical 9.1
  CVE-2022-24942 Heap-based buffer overflow in MicriumOS HTTP Server allows potential remote code execution

  silabs.com · Gecko Platform

  EPSS 2.4%
• Critical 9.8
  CVE-2022-39382 NODE_ENV in Keystone defaults to development with esbuild

  keystonejs · keystone

  EPSS 2.1%
• Critical 9.8
  CVE-2022-37897 There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (…

  Hewlett Packard Enterprise · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

  EPSS 1.9%

All 57 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.5
  CVE-2022-3786 X.509 Email Address Variable Length Buffer Overflow

  OpenSSL · OpenSSL

  EPSS 92%
• High 7.5
  CVE-2022-3602 X.509 Email Address 4-byte Buffer Overflow

  OpenSSL · OpenSSL

  EPSS 91%
• Low 3.1
  CVE-2022-39379 Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

  fluent · fluentd

  EPSS 45%
• High 8.8
  CVE-2022-43568 Reflected Cross-Site Scripting via the radio template in Splunk Enterprise

  Splunk · Splunk Enterprise

  EPSS 43%
• High 7.4
  CVE-2022-39323 SQL Injection on REST API in GLPI

  GLPI · glpi

  EPSS 37%
• Medium 6.3
  CVE-2022-3801 IBAX go-ibax rowsInfo sql injection

  IBAX · go-ibax

  EPSS 30%
• Unscored
  CVE-2022-3654 Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…

  Google · Chrome

  EPSS 24%
• Medium 4.3
  CVE-2022-38380 An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remote authenticated read-only user to…

  Fortinet · Fortinet FortiOS

  EPSS 23%