Week 2, 2024
8–14 January 2024
Newly exploited 9
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
Critical 9.8
CVE-2023-29357 KEV Jan 10, 2024 · ransomware Microsoft SharePoint Server Elevation of Privilege VulnerabilityEPSS 100%
-
Critical 9.1
CVE-2024-21887 KEV Jan 10, 2024 · ransomware A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administr…EPSS 100%
-
High 8.2
CVE-2023-46805 KEV Jan 10, 2024 · ransomware An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted reso…EPSS 100%
-
Critical 9.8
CVE-2016-20017 KEV Jan 8, 2024 D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2…EPSS 66%
-
Critical 9.8
CVE-2023-38203 KEV Jan 8, 2024 · ransomware Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCEEPSS 97%
-
Critical 9.8
CVE-2023-29300 KEV Jan 8, 2024 · ransomware Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code executionEPSS 100%
-
High 8.9
CVE-2023-27524 KEV Jan 8, 2024 Apache Superset: Session validation vulnerability when using provided default SECRET_KEYEPSS 98%
-
High 7.8
CVE-2023-41990 KEV Jan 8, 2024 The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7…EPSS 1.4%
Apple · macOS · iOS and iPadOS · watchOS
- Medium 5.3 EPSS 100%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.1
CVE-2024-21887 A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administr…EPSS 100%
- Critical 10.0 EPSS 94%
- Critical 10.0 EPSS 93%
-
Critical 9.8
CVE-2023-6875 POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app APIEPSS 90%
Saad Iqbal · Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
-
Critical 9.8
CVE-2023-31446 In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to inject…EPSS 61%
-
Critical 9.8
CVE-2023-6567 LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_byEPSS 51%
ThimPress · LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
-
Critical 9.8
CVE-2023-50919 An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4.…EPSS 48%
-
Critical 9.1
CVE-2023-47211 A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbi…EPSS 47%
-
Critical 9.8
CVE-2023-51126 Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. NOTE: The ven…EPSS 31%
-
Critical 9.8
CVE-2023-51123 An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in …EPSS 24%
-
Critical 9.8
CVE-2023-49237 An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack lang…EPSS 19%
-
Critical 9.8
CVE-2024-21591 Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code ExecutionEPSS 18%
-
Critical 9.6
CVE-2023-39336 An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker with access to the internal network to exe…EPSS 10%
- Critical 9.8 EPSS 5.1%
-
Critical 9.1
CVE-2024-0057 NET, .NET Framework, and Visual Studio Security Feature Bypass VulnerabilityEPSS 2.8%
Microsoft · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 8.2
CVE-2023-46805 An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted reso…EPSS 100%
- High 7.3 EPSS 73%
-
High 7.3
CVE-2024-20697 Windows libarchive Remote Code Execution VulnerabilityEPSS 72%
Microsoft · Windows 11 version 23H2 · Windows 11 version 22H2 · Windows Server 2022, 23H2 Edition (Server Core installation)
-
Medium 5.3
CVE-2024-0305 Guangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosureEPSS 67%
- High 7.5 EPSS 42%
- High 7.5 EPSS 40%
- Medium 5.3 EPSS 38%
-
High 8.8
CVE-2024-21318 Microsoft SharePoint Server Remote Code Execution VulnerabilityEPSS 31%
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition
Advisories
- BSI CERT-Bund (WID) 613 critical
- Microsoft Security Response Center 572 critical
- AlmaLinux Security Advisories 21
- Ubuntu Security Notices (USN) 213 critical
- Rocky Linux Security Advisories 19
- Oracle Linux Security Advisories (ELSA) 18
- SUSE / openSUSE Security Updates 13
- CISA ICS & IT advisories 93 critical
- Debian Security (DSA / DLA) 71 critical
- Siemens ProductCERT 62 critical
- Schneider Electric CPCERT 1
- USN-6038-2 golang-1.13, golang-1.16 vulnerabilities 18 CVEs
- ICSA-24-011-03 Rapid Software LLC Rapid SCADA 7 CVEs
- WID-SEC-2024-0077 GitLab: Mehrere Schwachstellen 5 CVEs
- DLA-3709-1 squid - security update 5 CVEs
- WID-SEC-2024-0075 D-LINK Router DIR-822+: Mehrere Schwachstellen 3 CVEs
- ICSA-24-011-09 Siemens SIMATIC CN 4100 3 CVEs
- SSA-777015 SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7 3 CVEs
- USN-6578-1 dotnet6, dotnet7, dotnet8 vulnerabilities 2 CVEs
- WID-SEC-2024-0059 Ivanti Connect Secure: Mehrere Schwachstellen 2 CVEs
- USN-6569-1 libclamunrar vulnerabilities 2 CVEs