CISA adds WatchGuard flaw to its Known Exploited Vulnerabilities Catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11317 | Unrestricted File Upload / RCE in Progress Telerik UI for ASP.NET AJAX | 9.8 | 84% | KEVPoC ×2 | KEV |
| CVE-2020-2509 | Command Injection RCE in QNAP Network-Attached Storage (NAS) | 9.8 | 34% | KEV | KEV |
| CVE-2021-22600 | Double-Free Privilege Escalation in Linux Kernel af_packet (CVE-2021-22600) | 7.0 | 7% | KEV | KEV |
| CVE-2021-27852 | Unauthenticated Deserialization RCE in Checkbox Survey 6 and Earlier | 9.8 | 30% | KEV | KEV |
| CVE-2021-39793 | Out-of-Bounds Write in Google Pixel Kernel Driver Enables Local Privilege Escalation | 7.8 | <1% | KEV | KEV |
CVE-2021-42287+1 related CVE | Privilege Escalation in Microsoft Active Directory Domain Services | 7.5 | 77% | KEVRansomware | KEV |
| CVE-2022-23176 | Privilege Escalation in WatchGuard Firebox/XTM Fireware OS | 8.8 | 11% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
The U. S. CISA added the CVE-2022-23176 flaw in WatchGuard Firebox and XTM appliances to its Known Exploited Vulnerabilities Catalog .
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.