Week 9, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-27372 SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4…
  EPSS 100%
• Critical 10.0
  CVE-2023-26477 org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability

  xwiki · xwiki-platform

  EPSS 75%
• Critical 10.0
  CVE-2023-26475 XWiki Platform vulnerable to Remote Code Execution in Annotations

  xwiki · xwiki-platform

  EPSS 64%
• Critical 9.8
  CVE-2022-45551 An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagn…
  EPSS 24%
• Critical 9.8
  CVE-2023-25234 Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface.
  EPSS 17%
• Critical 9.8
  CVE-2023-20078 Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities

  Cisco · Cisco IP Phones with Multiplatform Firmware

  EPSS 10%
• Critical 9.8
  CVE-2023-20079 Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities

  Cisco · Cisco IP Phones with Multiplatform Firmware

  EPSS 10%
• Critical 9.1
  CVE-2023-27290 IBM Observability with Instana missing authentication

  IBM · Observability with Instana

  EPSS 8.6%
• Critical 9.8
  CVE-2023-22750 Multiple Unauthenticated Command Injections in the PAPI Protocol

  Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

  EPSS 1.7%
• Critical 9.8
  CVE-2023-22749 Multiple Unauthenticated Command Injections in the PAPI Protocol

  Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

  EPSS 1.7%
• Critical 9.8
  CVE-2023-22748 Multiple Unauthenticated Command Injections in the PAPI Protocol

  Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

  EPSS 1.7%
• Critical 9.8
  CVE-2023-22747 Multiple Unauthenticated Command Injections in the PAPI Protocol

  Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

  EPSS 1.7%
• Critical 9.8
  CVE-2023-23513 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. Mo…

  Apple · macOS

  EPSS 1.6%
• Critical 9.8
  CVE-2023-26779 CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).
  EPSS 1.4%
• Critical 9.8
  CVE-2023-22752 Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol

  Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

  EPSS 1.3%

All 39 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 5.5
  CVE-2022-36021 Redis string pattern matching can be abused to achieve Denial of Service

  Redis · Redis

  EPSS 60%
• High 7.5
  CVE-2022-47075 An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmploye…
  EPSS 59%
• Medium 6.1
  CVE-2023-27293 Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javascript as the answer to a questionnaire …
  EPSS 57%
• High 7.5
  CVE-2023-26255 An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileNa…
  EPSS 47%
• Unscored
  CVE-2023-0656 A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impa…

  SonicWall · SonicOS

  EPSS 41%
• High 7.2
  CVE-2023-26609 ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.
  EPSS 39%
• High 7.2
  CVE-2023-0084 Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting

  roxnor · MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor

  EPSS 29%
• High 7.2
  CVE-2023-1162 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection

  DrayTek · Vigor 2960

  EPSS 26%