Vulnerabilitycritical
Week in review: Critical git vulnerabilities, increasingly malicious Google Search ads
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-41903 | Git is distributed revision control system | 9.8 | 44% | ||
| CVE-2022-46169 | Unauthenticated Command Injection in Cacti (CVE-2022-46169) | 9.8 | 100% | KEVPoC | KEV |
| CVE-2022-47966 | Unauthenticated SAML RCE in Zoho ManageEngine On-Premise Products | 9.8 | 100% | KEVRansomwarePoC ×6 | KEV |
CVE-2022-4873+1 related CVE | On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter | 9.8 group max | 7% | PoC |
From the original article
3 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Cacti servers under attack by attackers exploiting CVE-2022-46169 If you’re running the Cacti network monitoring solution and you haven’t updated it since early December, now is the time to do it to foil attackers exploiting a critical command injection flaw (CVE-2022-46169).
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.