CISA adds Samsung and D-link bugs to its Known Exploited Vulnerabilities catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-17621 | Unauthenticated Root Command Injection in D-Link DIR-859 Router UPnP | 9.8 | 91% | KEVPoC ×2 | KEV |
| CVE-2019-20500 | Authenticated OS Command Injection in D-Link DWL-2600AP Access Point Web Interface | 7.8 | 97% | KEVPoC | KEV |
CVE-2021-25372+1 related CVE | Out-of-Bounds Memory Access in Samsung Android DSP Driver | 6.7 | <1% | KEV | KEV |
CVE-2021-25394+1 related CVE | Use-After-Free Race Condition in Samsung Mobile MFC Charger Driver | 6.4 | <1% | KEV | KEV |
CVE-2021-25487+1 related CVE | Out-of-Bounds Read in Samsung Modem Interface Driver Enables Arbitrary Code Execution | 7.8 group max | <1% | KEV | KEV |
From the original article
1 min read at securityaffairs.com
US CISA added actively exploited Samsung and D-Link vulnerabilities to its Known Exploited Vulnerabilities catalog. US Cybersecurity and Infrastructure Security Agency (CISA) added six Samsung and two D-Link vulnerabilities to its Known Exploited Vulnerabilities Catalog . CVE-2019-17621 (CVSS score: 9.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.