Week 14, 2023
3–9 April 2023
Newly exploited 6
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
High 8.8
CVE-2021-27878 KEV Apr 7, 2023 · ransomware An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typica…EPSS 24%
-
High 8.2
CVE-2021-27877 KEV Apr 7, 2023 · ransomware An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authenticatio…EPSS 65%
-
High 8.1
CVE-2021-27876 KEV Apr 7, 2023 · ransomware An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typica…EPSS 14%
-
High 7.8
CVE-2019-1388 KEV Apr 7, 2023 · ransomware An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Di…EPSS 8.6%
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems
-
Low 3.3
CVE-2023-26083 KEV Apr 7, 2023 Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0…EPSS 1.2%
-
Medium 6.1
CVE-2022-27926 KEV Apr 3, 2023 A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated …EPSS 18%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2023-1671 A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.EPSS 100%
- Critical 10.0 EPSS 63%
- Critical 9.8 EPSS 40%
- Critical 9.8 EPSS 2.8%
-
Critical 9.8
CVE-2023-26921 OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd.EPSS 2.7%
- Critical 9.8 EPSS 2.5%
-
Critical 9.8
CVE-2023-26866 GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote comman…EPSS 2.3%
- Critical 9.8 EPSS 2.3%
-
Critical 9.8
CVE-2022-4939 WCFM Membership <= 2.10.0 - Unauthenticated Privilege EscalationEPSS 2.1%
WC Lovers · WCFM Membership – WooCommerce Memberships for Multivendor Marketplace
-
Critical 9.8
CVE-2023-26978 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg.EPSS 1.9%
-
Critical 9.8
CVE-2023-26848 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules.EPSS 1.9%
-
Critical 9.8
CVE-2023-26750 SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code via the runAction fun…EPSS 1.8%
-
Critical 9.8
CVE-2023-29478 BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This …EPSS 1.7%
- Critical 9.8 EPSS 1.6%
-
Critical 9.8
CVE-2022-31890 SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae via the order paramete…EPSS 1.5%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 8.8
CVE-2022-43769 Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)EPSS 98%
-
High 8.6
CVE-2022-43939 Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization DecisionsEPSS 92%
-
Medium 5.3
CVE-2023-20073 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload VulnerabilityEPSS 90%
-
High 7.5
CVE-2023-28342 Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.EPSS 78%
-
Medium 6.5
CVE-2023-20118 A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an auth…EPSS 54%
-
Unscored
CVE-2023-26775 File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php e…EPSS 49%
-
Unscored
CVE-2022-27665 Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of malicious code and comm…EPSS 33%
-
High 7.2
CVE-2023-20128 Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection VulnerabilitiesEPSS 30%
Advisories
- SUSE / openSUSE Security Updates 424 critical
- BSI CERT-Bund (WID) 392 critical
- Rocky Linux Security Advisories 20
- Oracle Linux Security Advisories (ELSA) 15
- AlmaLinux Security Advisories 12
- Ubuntu Security Notices (USN) 121 critical
- Debian Security (DSA / DLA) 104 critical
- CISA ICS & IT advisories 62 critical
- DLA-3382-1 openimageio - security update 19 CVEs
- ICSA-23-094-01 Nexx Smart Home Device 5 CVEs
- SUSE-SU-2023:1792-1 Security update for go1.19 4 CVEs
- SUSE-SU-2023:1791-1 Security update for go1.20 4 CVEs
- USN-5998-1 apache-log4j1.2 vulnerabilities 4 CVEs
- ICSA-23-075-06 Honeywell OneWireless Wireless Device Manager 3 CVEs
- WID-SEC-2023-0860 NGINX NJS: Mehrere Schwachstellen ermöglichen Codeausführung 2 CVEs
- SUSE-SU-2023:1799-1 Security update for ghostscript 1 CVEs
- SUSE-SU-2023:1797-1 Security update for ghostscript 1 CVEs
- DSA-5382-1 cairosvg - security update 1 CVEs