Week 26, 2023

26 June – 2 July 2023

New CVEs: 518
Critical: 24
High: 48
Newly exploited: 8
Advisories: 184
Malicious pkgs: 20

Newly exploited 8

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2019-17621 KEV Jun 29, 2023 The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands…
EPSS 91%
High 7.8
CVE-2019-20500 KEV Jun 29, 2023 D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface…
EPSS 97%
High 7.3
CVE-2021-25487 KEV Jun 29, 2023 Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary c…
Samsung Mobile · Samsung Mobile Devices
Medium 6.4
CVE-2021-25394 KEV Jun 29, 2023 A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compr…
Samsung Mobile · Samsung Mobile Devices
Medium 6.4
CVE-2021-25395 KEV Jun 29, 2023 A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.
Samsung Mobile · Samsung Mobile Devices
Medium 6.1
CVE-2021-25372 KEV Jun 29, 2023 An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
Samsung Mobile · Samsung Mobile Devices
Medium 6.1
CVE-2021-25371 KEV Jun 29, 2023 A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
Samsung Mobile · Samsung Mobile Devices
Low 3.3
CVE-2021-25489 KEV Jun 29, 2023 Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to…
Samsung Mobile · Samsung Mobile Devices

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 10.0
CVE-2023-36469 Code injection through NotificationRSSService in XWiki Platform
xwiki · xwiki-platform

EPSS 82%
Critical 9.8
CVE-2023-2982 WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass
cyberlord92 · miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)

EPSS 46%
Critical 9.8
CVE-2023-31222 Medtronic Paceart MSMQ Deserialization of Untrusted Data
Medtronic · Paceart Optima

EPSS 28%
Critical 9.8
CVE-2023-36812 Remote Code Execution in OpenTSDB
OpenTSDB · OpenTSDB

EPSS 17%
Critical 9.8
CVE-2023-26134 git-commit-info vulnerable to Command Injection
EPSS 3.6%
Critical 9.8
CVE-2023-36475 Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution
parse-community · parse-server

EPSS 3.2%
Critical 9.8
CVE-2023-28323 A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could pot…
ivanti · Ivanti Endpoint Manager

EPSS 3.1%
Critical 9.8
CVE-2023-32222 D-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication Bypass
D-Link · DSL-G256DG firmware version vBZ_1.00.27

EPSS 1.9%
Critical 10.0
CVE-2023-36470 Code injection in icon themes of XWiki Platform
xwiki · xwiki-platform

EPSS 1.9%
Critical 9.8
CVE-2023-2834 BookIt <= 2.3.7 - Authentication Bypass
stellarwp · Bookit — Booking & Appointment Calendar

EPSS 1.9%
Critical 10.0
CVE-2023-36468 Upgrading doesn't prevent exploiting vulnerable XWiki documents
xwiki · xwiki-platform

EPSS 1.9%
Critical 9.8
CVE-2023-32224 D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts
D-Link · DSL-224 firmware version 3.0.10

EPSS 1.4%
Critical 9.8
CVE-2021-31635 jFinal Server-Side Template Injection vulnerability
EPSS 1.2%
Critical 9.8
CVE-2023-31543 pipreqs vulnerable to Dependency Confusion
EPSS 1.2%
Critical 9.8
CVE-2023-3249 Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass
cyberlord92 · Web3 – Crypto wallet Login & NFT token gating

EPSS 1.1%

All 24 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

ALSA-2023:3922 Critical: go-toolset:rhel8 security update 4 CVEs
ALSA-2023:3923 Critical: go-toolset and golang security update 4 CVEs
WID-SEC-2023-1611 D-LINK Router: Mehrere Schwachstellen 3 CVEs
ICSA-23-180-01 Delta Electronics InfraSuite Device Master 3 CVEs
WID-SEC-2023-1596 D-LINK Router DSL-224: Mehrere Schwachstellen 2 CVEs
ICSMA-23-180-01 Medtronic Paceart Optima System 1 CVEs
USN-6189-1 etcd vulnerability 1 CVEs
SUSE-SU-2023:2641-1 Security update for python39 1 CVEs