Week 19, 2023
8–14 May 2023
Newly exploited 8
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
- Critical 9.8 EPSS 90%
-
Critical 9.8
CVE-2023-25717 KEV May 12, 2023 Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=adm…EPSS 98%
-
Critical 9.8
CVE-2016-3427 KEV May 12, 2023 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality…EPSS 92%
-
High 7.8
CVE-2010-3904 KEV May 12, 2023 The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not pro…EPSS 16%
-
High 7.8
CVE-2021-3560 KEV May 12, 2023 It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. …EPSS 22%
- High 7.5 EPSS 23%
-
Medium 5.5
CVE-2014-0196 KEV May 12, 2023 The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, whi…EPSS 20%
-
High 7.8
CVE-2023-29336 KEV May 9, 2023 Win32k Elevation of Privilege VulnerabilityEPSS 41%
Microsoft · Windows Server 2016 · Windows Server 2016 (Server Core installation) · Windows 10 Version 1607
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2023-24941 Windows Network File System Remote Code Execution VulnerabilityEPSS 95%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2022
-
Critical 9.8
CVE-2023-32243 WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege EscalationEPSS 76%
- Critical 9.1 EPSS 70%
-
Critical 9.8
CVE-2023-27823 An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials.EPSS 54%
- Critical 9.8 EPSS 34%
-
Critical 9.8
CVE-2023-30194 Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().EPSS 32%
-
Critical 9.8
CVE-2023-31983 A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/we…EPSS 25%
-
Critical 9.0
CVE-2023-31475 An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a …EPSS 14%
-
Critical 9.8
CVE-2023-29809 SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the r…EPSS 11%
-
Critical 9.8
CVE-2023-1934 The PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated error-based PostgreSQL Injection vulnerability. Present withi…EPSS 8.1%
-
Critical 9.8
CVE-2023-31985 A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the formAccept function in…EPSS 8.1%
-
Critical 9.8
CVE-2023-30330 SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/default…EPSS 5.9%
-
Critical 9.6
CVE-2023-2478 An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.9.7, all versions starting from 15.10 before 15.10.6, all vers…EPSS 5%
-
Critical 9.8
CVE-2023-24943 Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityEPSS 4.7%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
- Critical 9.8 EPSS 3.2%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 7.2
CVE-2023-24955 Microsoft SharePoint Server Remote Code Execution VulnerabilityEPSS 85%
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition
-
High 7.2
CVE-2023-28128 An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove …EPSS 84%
-
High 8.1
CVE-2023-29325 Windows OLE Remote Code Execution VulnerabilityEPSS 84%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Medium 6.5
CVE-2023-24950 Microsoft SharePoint Server Spoofing VulnerabilityEPSS 67%
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition
-
Medium 5.9
CVE-2023-28126 An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser metho…EPSS 67%
-
High 7.5
CVE-2023-28127 A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosure.EPSS 59%
- High 7.5 EPSS 46%
- High 7.2 EPSS 45%
Advisories
- AlmaLinux Security Advisories 61
- SUSE / openSUSE Security Updates 482 critical
- BSI CERT-Bund (WID) 431 critical
- Microsoft Security Response Center 406 critical
- Ubuntu Security Notices (USN) 202 critical
- Amazon Linux Security Center (ALAS) 20
- CISA ICS & IT advisories 168 critical
- Debian Security (DSA / DLA) 91 critical
- Siemens ProductCERT 63 critical
- Schneider Electric CPCERT 4
- Oracle Linux Security Advisories (ELSA) 2
- SICK PSIRT 1
- CERT@VDE 11 critical
- WID-SEC-2023-1178 Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen 28 CVEs
- VDE-2023-009 ads-tec: Multiple Vulnerabilities in IRF1000, IRF2000 and IRF3000 18 CVEs
- SSA-892048 SSA-892048: Third-Party Component Vulnerabilities in SINEC NMS before V1.0.3.1 9 CVEs
- ICSA-23-131-05 Siemens SINEC NMS Third-Party 9 CVEs
- ICSA-23-131-08 Teltonika Remote Management System and RUT Model Routers 8 CVEs
- ICSA-23-129-02 Hitachi Energy MSM 8 CVEs
- SUSE-SU-2023:2127-1 Security update for go1.19 7 CVEs
- SUSE-SU-2023:2105-2 Security update for go1.20 7 CVEs
- USN-6067-1 neutron vulnerabilities 5 CVEs
- SSA-325383 SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1 4 CVEs