Exploit / PoChighExploited in the wild

CISA adds Veeam Backup and Replication bugs to Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsDec 16, 2022 · 09:17 UTC (Dec 16, 2022)2 min read2 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-26500 CVE-2022-26501 CVE-2022-42475 CVE-2022-44698 CVE-2022-27518 CVE-2022-42856

Tags: cve-2022-26500 cve-2022-26501 cve-2022-42475 cve-2022-44698 cve-2022-27518 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-26501 +1 related CVE CVE-2022-26500	Unauthenticated RCE in Veeam Backup & Replication 10.x and 11.x	9.8 group max	4%	KEVRansomware	Mar 17, 2022 KEV Dec 13, 2022
CVE-2022-27518	Unauthenticated RCE/Authentication Bypass in Citrix ADC and Gateway	9.8	7%	KEV	Dec 13, 2022 KEV Dec 13, 2022
CVE-2022-42475	Unauthenticated Heap Overflow in Fortinet FortiOS/FortiProxy SSL-VPN (Critical RCE)	9.8	99%	KEVRansomwarePoC	Jan 2, 2023 KEV Dec 13, 2022
CVE-2022-42856	Type Confusion in Apple WebKit (Safari/iOS/macOS/tvOS), Actively Exploited	8.8	9%	KEV	Dec 15, 2022 KEV Dec 14, 2022
CVE-2022-44698	SmartScreen Security Feature Bypass in Windows 10/11 and Windows Server	5.4	76%	KEVRansomware	Dec 13, 2022 KEV Dec 13, 2022

From the original article

2 min read at securityaffairs.com

US CISA added two vulnerabilities impacting Veeam Backup & Replication software to its Known Exploited Vulnerabilities Catalog. The U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.