Week 11, 2023
13–19 March 2023
Newly exploited 4
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
- High 8.6 EPSS 97%
-
Critical 9.8
CVE-2023-23397 KEV Mar 14, 2023 Microsoft Outlook Elevation of Privilege VulnerabilityEPSS 97%
Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office 2019
-
Medium 6.5
CVE-2022-41328 KEV Mar 14, 2023 A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 …EPSS 11%
-
Medium 4.4
CVE-2023-24880 KEV Mar 14, 2023 · ransomware Windows SmartScreen Security Feature Bypass VulnerabilityEPSS 78%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2023-25280 OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parame…EPSS 98%
-
Critical 9.8
CVE-2023-23397 Microsoft Outlook Elevation of Privilege VulnerabilityEPSS 97%
Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office 2019
-
Critical 9.8
CVE-2023-28461 Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using…EPSS 68%
-
Critical 9.8
CVE-2023-25279 OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.EPSS 31%
- Critical 9.6 EPSS 26%
-
Critical 10.0
CVE-2022-43605 An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c.…EPSS 14%
-
Critical 10.0
CVE-2022-43604 An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c.…EPSS 14%
- Critical 9.8 EPSS 3.9%
-
Critical 9.8
CVE-2023-23415 Internet Control Message Protocol (ICMP) Remote Code Execution VulnerabilityEPSS 3.5%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
- Critical 9.8 EPSS 2.8%
-
Critical 9.8
CVE-2023-24762 OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter fo…EPSS 2.5%
-
Critical 9.8
CVE-2023-27040 Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.EPSS 2%
-
Critical 9.8
CVE-2023-23392 HTTP Protocol Stack Remote Code Execution VulnerabilityEPSS 1.7%
Microsoft · Windows Server 2022 · Windows 11 version 22H2 · Windows 11 version 21H2
-
Critical 9.8
CVE-2023-21708 Remote Procedure Call Runtime Remote Code Execution VulnerabilityEPSS 1.5%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
- Critical 9.8 EPSS 1.4%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 8.8
CVE-2023-1389 TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci…EPSS 100%
-
Unscored
CVE-2023-27253 A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via …EPSS 90%
-
Unscored
CVE-2023-28343 OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, beca…EPSS 85%
-
Medium 4.4
CVE-2023-24880 Windows SmartScreen Security Feature Bypass VulnerabilityEPSS 78%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
- High 7.5 EPSS 64%
- Medium 6.3 EPSS 36%
-
High 7.5
CVE-2023-24033 The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types spec…EPSS 33%
-
High 8.2
CVE-2023-23383 Service Fabric Explorer Spoofing VulnerabilityEPSS 12%
Microsoft · Azure Service Fabric 9.1 for Windows · Azure Service Fabric 9.0 for Windows · Azure Service Fabric 9.0 for Linux
Advisories
- Microsoft Security Response Center 777 critical
- BSI CERT-Bund (WID) 482 critical
- SUSE / openSUSE Security Updates 453 critical
- Ubuntu Security Notices (USN) 201 critical
- Amazon Linux Security Center (ALAS) 16
- Debian Security (DSA / DLA) 131 critical
- Siemens ProductCERT 72 critical
- CISA ICS & IT advisories 72 critical
- Oracle Linux Security Advisories (ELSA) 5
- Schneider Electric CPCERT 31 critical
- CERT@VDE 21 critical
- Rocky Linux Security Advisories 1
- AlmaLinux Security Advisories 1
- ICSA-23-075-01 Siemens SCALANCE, RUGGEDCOM Third-Party 65 CVEs
- SSA-419740 SSA-419740: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2 65 CVEs
- WID-SEC-2023-0651 Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen 56 CVEs
- DSA-5372-1 rails - security update 10 CVEs
- USN-5956-1 libphp-phpmailer vulnerabilities 7 CVEs
- SUSE-SU-2023:0748-1 Security update for python310 5 CVEs
- WID-SEC-2023-0653 Adobe ColdFusion: Mehrere Schwachstellen 3 CVEs
- SUSE-SU-2023:0799-1 Security update for apache2 2 CVEs
- SUSE-SU-2023:0764-1 Security update for apache2 2 CVEs
- SSA-851884 SSA-851884: Authentication Bypass Vulnerability in Mendix SAML Module 2 CVEs