Vulnerabilityhigh
Top 12 vulnerabilities routinely exploited in 2022
- CVEs
- CVE-2018-13379CVE-2021-34473CVE-2021-31207CVE-2021-34523CVE-2021-40539CVE-2021-26084CVE-2022-22954CVE-2022-22960CVE-2022-1388CVE-2022-30190CVE-2022-26134CVE-2019-19781CVE-2017-0199CVE-2017-11882CVE-2020-1472CVE-2021-26855CVE-2021-27065CVE-2021-26858CVE-2021-26857CVE-2022-41082CVE-2019-11510CVE-2021-20021CVE-2021-20038CVE-2022-42475CVE-2022-40684CVE-2022-27593
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0199 | Remote Code Execution in Microsoft Office and WordPad via crafted document files | 7.8 | 99% | KEVRansomwarePoC ×6 | KEV |
| CVE-2017-11882 | Memory Corruption RCE in Microsoft Office via Legacy Equation Editor | 7.8 | 100% | KEVRansomwarePoC ×10 | KEV |
| CVE-2018-13379 | Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2019-11510 | Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-19781 | Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
| CVE-2021-20021 | Improper Privilege Management in SonicWall Email Security 10.0.9.x Grants Admin Access | 9.8 | 89% | KEVRansomware | KEV |
| CVE-2021-20038 | Unauthenticated Stack Buffer Overflow in SonicWall SMA 100 Appliances | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 9.8 | 100% | KEVRansomwarePoC | KEV |
CVE-2021-26855+3 related CVEs | Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon) | 9.1 group max | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2021-31207 | Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE | 6.6 | 100% | KEVRansomwarePoC | KEV |
CVE-2021-34473+1 related CVE | SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell) | 9.1 group max | 100% | KEVRansomwarePoC | KEV |
| CVE-2021-40539 | Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus | 9.8 | 99% | KEVRansomwarePoC | KEV |
| CVE-2022-1388 | Unauthenticated RCE in F5 BIG-IP via Missing Authentication | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2022-22954 | Server-Side Template Injection RCE in VMware Workspace ONE Access and Identity Manager | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2022-22960 | Local Privilege Escalation in VMware Workspace ONE Access, Identity Manager and vRA | 7.8 | 36% | KEVPoC ×3 | KEV |
| CVE-2022-26134 | Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2022-27593 | QNAP Photo Station Externally Controlled Reference Flaw Exploited by DeadBolt Ransomware | 9.1 | 88% | KEVRansomware | KEV |
| CVE-2022-30190 | MSDT URL Protocol Remote Code Execution in Microsoft Windows (Follina) | 7.8 | 99% | KEVRansomwarePoC | KEV |
| CVE-2022-40684 | Admin-Interface Auth Bypass in Fortinet FortiOS, FortiProxy & FortiSwitchManager | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2022-41082 | Authenticated RCE in Microsoft Exchange Server (ProxyNotShell) | 8.0 | 100% | KEVRansomwarePoC | KEV |
| CVE-2022-42475 | Unauthenticated Heap Overflow in Fortinet FortiOS/FortiProxy SSL-VPN (Critical RCE) | 9.8 | 99% | KEVRansomwarePoC | KEV |
From the original article
2 min read at helpnetsecurity.com
Cybersecurity agencies from member countries of the Five Eyes intelligence alliance have released a list of the top 12 vulnerabilities routinely exploited in 2022, plus 30 additional ones also “popular” with attackers. “In 2022, malicious cyber actors exploited older software vulnerabilities more frequently than recently disclosed vulnerabilities and targeted unpatched, internet-facing systems.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.