Week 38, 2023

18–24 September 2023

New CVEs: 348
Critical: 32
High: 108
Newly exploited: 6
Advisories: 218
Malicious pkgs: 112

Newly exploited 6

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

High 7.2
CVE-2023-41179 KEV Sep 21, 2023 A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Busine…
Trend Micro · Trend Micro Apex One · Trend Micro Worry-Free Business Security · Trend Micro Worry-Free Business Security Services

EPSS 4.2%
High 8.8
CVE-2023-28434 KEV Sep 19, 2023 MinIO is vulnerable to privilege escalation on Linux/MacOS
minio · minio

EPSS 7.9%
Critical 9.8
CVE-2021-3129 KEV Sep 18, 2023 · ransomware Unauthenticated remote code execution in Ignition
EPSS 100%
Critical 9.8
CVE-2014-8361 KEV Sep 18, 2023 The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild thr…
EPSS 100%
High 8.8
CVE-2017-6884 KEV Sep 18, 2023 · ransomware A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic…
EPSS 33%
Medium 5.0
CVE-2022-22265 KEV Sep 18, 2023 An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
Samsung Mobile · Samsung Mobile Devices

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2023-42793 In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
JetBrains · TeamCity

EPSS 100%
Critical 9.8
CVE-2023-5074 Authentication Bypass in D-Link D-View 8
D-Link · D-View 8

EPSS 69%
Critical 9.8
CVE-2023-31719 FUXA SQL Injection vulnerability
EPSS 44%
Critical 9.8
CVE-2023-33831 A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA
EPSS 26%
Critical 9.8
CVE-2019-19450 ReportLab vulnerable to remote code execution via paraparser
EPSS 6%
Critical 9.8
CVE-2023-43373 Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg parameter at /hoteldruid/interconnessioni.php.
EPSS 4.2%
Critical 9.8
CVE-2023-43374 Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log parameter at /hoteldruid/personalizza.php.
EPSS 3.7%
Critical 10.0
CVE-2023-2163 Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation
Linux · linux_kernel

EPSS 3.6%
Critical 9.8
CVE-2023-42810 systeminformation SSID Command Injection Vulnerability
sebhildebrandt · systeminformation

EPSS 2.2%
Critical 9.8
CVE-2023-40989 SQL injection in jeecgboot
EPSS 2.2%
Critical 9.1
CVE-2023-0118 Foreman: arbitrary code execution through templates
Red Hat · Red Hat Satellite 6.14 for RHEL 8 · Red Hat Satellite 6.13 for RHEL 8 · Red Hat Satellite 6.12 for RHEL 8

EPSS 1.4%
Critical 9.8
CVE-2023-43762 Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Mana…
EPSS 1.4%
Critical 9.8
CVE-2023-2262 Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow
Rockwell Automation · Rockwell Auotmation · 1756-EN2TR Series C · 1756-EN3TR Series A

EPSS 1.3%
Critical 9.6
CVE-2023-38888 Cross Site Scripting vulnerability in Dolibarr ERP CRM
EPSS 1.3%
Critical 9.1
CVE-2023-0773 Unauthorized Access Control Vulnerability in Uniview IP Camera
Uniview · Uniview IP Camera IPC322LB-SF28-A

EPSS 1.2%

All 32 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

USN-6385-1 linux-oem-6.0 vulnerabilities 37 CVEs
DSA-5503-1 netatalk - security update 10 CVEs
DLA-3573-1 frr - security update 10 CVEs
DSA-5502-1 xrdp - security update 10 CVEs
USN-6339-4 linux-intel-iotg vulnerabilities 8 CVEs
SUSE-SU-2023:2783-2 Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websoc 7 CVEs
ICSA-23-264-05 Rockwell Automation Connected Components Workbench 5 CVEs
WID-SEC-2023-2413 D-LINK Access Points DWL-6610: Mehrere Schwachstellen 5 CVEs
SUSE-SU-2023:3709-1 Security update for frr 5 CVEs
VDE-2023-038 Frauscher: Multiple Vulnerabilities in FDS101 3 CVEs