CISA adds 12 new flaws to Known Exploited Vulnerabilities Catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2011-4723 | Cleartext Password Storage in D-Link DIR-300 Router | — | 3% | KEV | — KEV |
| CVE-2018-6530 | Unauthenticated OS Command Injection in D-Link DIR-860L/865L/868L/880L Routers | 9.8 | 97% | KEVRansomwarePoC | KEV |
| CVE-2022-26258 | Unauthenticated Remote Command Execution in D-Link DIR-820L Router | 9.8 | 92% | KEVPoC ×2 | KEV |
| CVE-2022-27593 | QNAP Photo Station Externally Controlled Reference Flaw Exploited by DeadBolt Ransomware | 9.1 | 88% | KEVRansomware | KEV |
| CVE-2022-28958 | Rejected reason: DO NOT USE THIS CVE RECORD | — | — | ||
| CVE-2022-3075 | Actively Exploited Sandbox Escape via Insufficient Mojo Validation in Google Chrome | 9.6 | 6% | KEV | KEV |
From the original article
1 min read at securityaffairs.com
CISA added 12 more security flaws to its Known Exploited Vulnerabilities Catalog including four D-Link vulnerabilities. The U. S.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.