Week 7, 2023
13–19 February 2023
Newly exploited 5
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
- Critical 9.8 EPSS 100%
-
High 8.8
CVE-2023-23529 KEV Feb 14, 2023 A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.…EPSS 9.5%
Apple · macOS · iOS and iPadOS · Safari
-
High 7.8
CVE-2023-21823 KEV Feb 14, 2023 Windows Graphics Component Remote Code Execution VulnerabilityEPSS 5.6%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
High 7.8
CVE-2023-23376 KEV Feb 14, 2023 · ransomware Windows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 11%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
- High 7.3 EPSS 12%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 100%
-
Critical 9.8
CVE-2022-39952 A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.…EPSS 100%
-
Critical 9.8
CVE-2023-25717 Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=adm…EPSS 98%
-
Critical 9.8
CVE-2022-40022 Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.EPSS 92%
-
Critical 9.8
CVE-2023-21716 Microsoft Word Remote Code Execution VulnerabilityEPSS 85%
Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC for Mac 2021
-
Critical 9.8
CVE-2022-48323 Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker ca…EPSS 57%
-
Critical 9.3
CVE-2021-42756 Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and be…EPSS 35%
-
Critical 9.8
CVE-2023-20032 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions…EPSS 30%
Cisco · Cisco Secure Endpoint · Cisco Secure Web Appliance · Cisco Secure Endpoint Private Cloud Administration Portal
-
Critical 9.8
CVE-2023-21690 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityEPSS 28%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Critical 9.8
CVE-2023-21689 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityEPSS 27%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Critical 9.8
CVE-2023-21692 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityEPSS 21%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Critical 9.8
CVE-2022-40032 SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitr…EPSS 21%
-
Critical 9.8
CVE-2023-22855 Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed t…EPSS 15%
-
Critical 9.1
CVE-2023-25725 HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP h…EPSS 5.5%
-
Critical 9.8
CVE-2022-40347 SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attacke…EPSS 5.3%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- Medium 5.3 EPSS 100%
- High 7.2 EPSS 85%
- Medium 5.3 EPSS 83%
- Medium 5.4 EPSS 82%
- High 7.2 EPSS 80%
-
High 8.8
CVE-2023-21707 Microsoft Exchange Server Remote Code Execution VulnerabilityEPSS 80%
Microsoft · Microsoft Exchange Server 2016 Cumulative Update 23 · Microsoft Exchange Server 2013 Cumulative Update 23 · Microsoft Exchange Server 2019 Cumulative Update 12
- Medium 6.1 EPSS 65%
- High 7.5 EPSS 63%
Advisories
- Amazon Linux Security Center (ALAS) 1236 critical
- Microsoft Security Response Center 757 critical
- BSI CERT-Bund (WID) 671 critical
- SUSE / openSUSE Security Updates 528 critical
- Ubuntu Security Notices (USN) 161 critical
- Debian Security (DSA / DLA) 152 critical
- CISA ICS & IT advisories 142 critical
- Siemens ProductCERT 132 critical
- Oracle Linux Security Advisories (ELSA) 6
- Rocky Linux Security Advisories 5
- Schneider Electric CPCERT 3
- CERT@VDE 22 critical
- AlmaLinux Security Advisories 1
- VDE-2023-001 PHOENIX CONTACT: Multiple Vulnerabilities in PLCnext Firmware 64 CVEs
- ALAS2023-2023-058 Critical: expat security update (Amazon Linux 2023) 17 CVEs
- SUSE-SU-2023:0419-1 Security update for nodejs18 7 CVEs
- SUSE-SU-2023:0408-1 Security update for nodejs18 7 CVEs
- SUSE-SU-2023:0387-1 Security update for xrdp 7 CVEs
- WID-SEC-2023-0391 Microsoft Office Produkte: Mehrere Schwachstellen 6 CVEs
- SSA-953464 SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15 4 CVEs
- ICSA-23-047-03 Siemens Brownfield Connectivity Client 4 CVEs
- SUSE-SU-2023:0429-1 Security update for curl 3 CVEs
- ALAS2023-2023-016 Critical: apr security update (Amazon Linux 2023) 2 CVEs