VulnerabilitycriticalExploited in the wild

CISA adds Spring4Shell vulnerability, Apple zero

The RecordJan 13, 2023 · 00:00 UTC (Jan 13, 2023)3 min read2 · 1 read

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-22965 CVE-2022-22675 CVE-2022-22674 CVE-2021-45382

Tags: cve-2022-22965 cve-2022-22675 cve-2022-22674 cve-2021-45382 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-45382	Command Injection RCE in D-Link DIR-810L/820L/826L/830L/836L Routers	9.8	98%	KEVPoC	Feb 17, 2022 KEV Apr 4, 2022
CVE-2022-22675 +1 related CVE CVE-2022-22674	Out-of-Bounds Write in Apple macOS/iOS Kernel Allows Arbitrary Code Execution	7.8 group max	12%	KEV	May 26, 2022 KEV Apr 4, 2022
CVE-2022-22965	Unauthenticated RCE in VMware Spring Framework (Spring4Shell) - JDK 9+ Tomcat WARs	9.8	100%	KEVPoC	Apr 1, 2022 KEV Apr 4, 2022

From the original article

3 min read at therecord.media

The Cybersecurity and Infrastructure Security Agency (CISA) added four new vulnerabilities to its catalog of exploited bugs, including the much-discussed “Spring4Shell” remote code execution (RCE) vulnerability. In addition to the CVE-2022-22965 affecting the Spring Framework, CISA included CVE-2022-22675 and CVE-2022-22674, two vulnerabilities affecting macOS Monterey.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.