Exploit / PoCcriticalExploited in the wild

CISA adds Spring4Shell flaw to its Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsApr 5, 2022 · 14:15 UTC (Apr 5, 2022)2 min read5

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-22965 CVE-2022-22675 CVE-2022-22674 CVE-2021-45382

Tags: cve-2022-22965 cve-2022-22675 cve-2022-22674 cve-2021-45382 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-45382	Command Injection RCE in D-Link DIR-810L/820L/826L/830L/836L Routers	9.8	98%	KEVPoC	Feb 17, 2022 KEV Apr 4, 2022
CVE-2022-22675 +1 related CVE CVE-2022-22674	Out-of-Bounds Write in Apple macOS/iOS Kernel Allows Arbitrary Code Execution	7.8 group max	12%	KEV	May 26, 2022 KEV Apr 4, 2022
CVE-2022-22965	Unauthenticated RCE in VMware Spring Framework (Spring4Shell) - JDK 9+ Tomcat WARs	9.8	100%	KEVPoC	Apr 1, 2022 KEV Apr 4, 2022

From the original article

2 min read at securityaffairs.com

The U. S. CISA added the recently disclosed remote code execution (RCE) vulnerability Spring4Shell to its Known Exploited Vulnerabilities Catalog .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.