Week 6, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-23333 There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloa…
  EPSS 99%
• Critical 9.8
  CVE-2022-24990 TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNa…
  EPSS 83%
• Critical 9.8
  CVE-2022-45699 Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as roo…
  EPSS 77%
• Critical 9.8
  CVE-2022-3229 Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenticated attacker ca…

  Unified Intents AB · Unified Remote

  EPSS 66%
• Critical 9.8
  CVE-2022-47071 In NVS365 V01, the background network test function can trigger command execution.
  EPSS 43%
• Critical 9.8
  CVE-2023-0744 Improper Access Control in answerdev/answer

  answerdev · answerdev/answer

  EPSS 6.4%
• Critical 9.8
  CVE-2022-4681 Hide My WP < 6.2.9 - Unauthenticated SQLi
  EPSS 3.8%
• Critical 10.0
  CVE-2023-24813 URI validation failure on SVG parsing. Bypass of CVE-2023-23924

  dompdf · dompdf

  EPSS 2.5%
• Critical 9.8
  CVE-2023-24276 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.
  EPSS 1.9%
• Critical 9.8
  CVE-2022-43550 A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow a…
  EPSS 1.8%
• Critical 9.8
  CVE-2021-36471 Directory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and view sensitive information via /admin/index2.html, …
  EPSS 1.8%
• Critical 9.8
  CVE-2022-45526 SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to …
  EPSS 1.8%
• Critical 9.8
  CVE-2021-31574 In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal at…

  MediaTek · EN7528, EN7580

  EPSS 1.7%
• Critical 9.8
  CVE-2021-31575 In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal at…

  MediaTek · EN7528, EN7580

  EPSS 1.7%
• Critical 9.8
  CVE-2021-31573 In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal at…

  MediaTek · EN7528, EN7580

  EPSS 1.7%

All 43 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.2
  CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection

  Fortra · GoAnywhere MFT

  EPSS 100%
• High 8.8
  CVE-2023-25194 Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect

  Apache Software Foundation · Apache Kafka Connect API

  EPSS 96%
• Medium 6.5
  CVE-2022-44268 ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the conten…
  EPSS 90%
• Medium 6.5
  CVE-2022-44267 ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin inp…
  EPSS 77%
• High 7.4
  CVE-2023-0286 X.400 address type confusion in X.509 GeneralName

  OpenSSL · OpenSSL

  EPSS 68%
• Medium 5.3
  CVE-2022-40224 A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP messa…

  Moxa · SDS-3008 Series Industrial Ethernet Switch

  EPSS 65%
• Medium 6.1
  CVE-2023-24322 A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts …
  EPSS 32%
• High 8.8
  CVE-2022-45768 Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker to execute arbitrary code via the formW…
  EPSS 29%