Week 2, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-0297 Code Injection in pyload/pyload

  pyload · pyload/pyload

  EPSS 96%
• Critical 9.9
  CVE-2022-45092 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker with access to the Web Based Management (…

  Siemens · SINEC INS

  EPSS 31%
• Critical 9.0
  CVE-2022-35401 An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-crafted HTTP re…

  ASUS · RT-AX82U

  EPSS 21%
• Critical 9.4
  CVE-2023-0017 Improper access control in SAP NetWeaver AS for Java

  SAP · NetWeaver AS for Java

  EPSS 16%
• Critical 9.8
  CVE-2022-3792 SQL Injection in GullsEye Terminal Operating System

  GullsEye · GullsEye terminal operating system

  EPSS 14%
• Critical 9.8
  CVE-2022-46502 Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /student_enrollment/admin/login.php.
  EPSS 14%
• Critical 9.8
  CVE-2022-4873 Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902

  Netcomm · NF20MESH · NF20 · NL1902

  EPSS 7.2%
• Critical 9.1
  CVE-2022-3782 Keycloak vulnerable to path traversal via double URL encoding

  redhat.com · Keycloak

  EPSS 6.2%
• Critical 9.8
  CVE-2022-48253 nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerabilit…
  EPSS 3.6%
• Critical 9.8
  CVE-2022-48252 The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter) OS Command Injection.
  EPSS 2.8%
• Critical 9.8
  CVE-2022-46478 The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitrary commands via cr…
  EPSS 2%
• Critical 9.8
  CVE-2022-4498 A vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via a…

  TP-Link Systems · Archer C5 · WR710N

  EPSS 2%
• Critical 9.8
  CVE-2022-3515 A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code executi…
  EPSS 1.8%
• Critical 9.8
  CVE-2017-20166 Ecto missing `is_nil` requirement
  EPSS 1.4%
• Critical 9.8
  CVE-2022-45299 webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL
  EPSS 1.4%

All 44 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.5
  CVE-2023-21758 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 93%
• High 7.5
  CVE-2023-21547 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 89%
• High 8.8
  CVE-2023-22952 In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.
  EPSS 80%
• High 7.3
  CVE-2023-22480 KubeOperator is vulnerable to unauthorized access to system API

  KubeOperator · KubeOperator

  EPSS 67%
• High 7.8
  CVE-2023-21768 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Microsoft · Windows Server 2022 · Windows 11 version 22H2 · Windows 11 version 21H2

  EPSS 65%
• High 8.8
  CVE-2023-21742 Microsoft SharePoint Server Remote Code Execution Vulnerability

  Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition

  EPSS 56%
• High 8.1
  CVE-2023-22496 Netdata vulnerable to command injection

  netdata · netdata

  EPSS 36%
• High 8.8
  CVE-2023-21674 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 34%