CISA sunsets 10 emergency directives thanks to evolution of exploited vulnerabilities catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-0601 | ECC Certificate Spoofing in Microsoft Windows CryptoAPI (Crypt32.dll) | 8.1 | 89% | KEV | KEV |
| CVE-2020-1350 | Wormable Unauthenticated RCE in Microsoft Windows DNS Server | 10.0 | 97% | KEV | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
| CVE-2021-22893 | Use-After-Free RCE in Ivanti Pulse Connect Secure License Services | 10.0 | 47% | KEVRansomware | KEV |
| CVE-2021-26855 | Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon) | 9.1 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2021-34527 | PrintNightmare: Remote Code Execution in Microsoft Windows Print Spooler | 8.8 | 100% | KEVRansomwarePoC ×3 | KEV |
From the original article
2 min read at therecord.media
Ten emergency directives issued by the U. S.’ s top cybersecurity agency have been retired after officials determined they were redundant thanks in part to a widely used catalog of exploited vulnerabilities.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.