CISA Urges Government to Patch Exploited Cisco, Microsoft Flaws
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8639 | Kernel-mode privilege escalation in Microsoft Windows Win32k | 7.8 | 22% | KEVRansomware | KEV |
CVE-2022-43939+1 related CVE | Authorization Bypass in Hitachi Vantara Pentaho Business Analytics Server | 9.8 group max | 92% | KEVPoC | KEV |
| CVE-2023-20118 | Authenticated Command Injection in Cisco Small Business RV Series Routers | 7.2 | 54% | KEV | KEV |
| CVE-2024-4885 | Unauthenticated Path Traversal RCE in Progress WhatsUp Gold | 9.8 | 99% | KEV | KEV |
From the original article
1 min read at infosecurity-magazine.com
A leading US security agency has ordered federal government bodies to patch five vulnerabilities it claims are being actively exploited by threat actors. The latest additions to the CISA Known Exploited Vulnerabilities (KEV) catalog include CVE-2023-20118, a command injection vulnerability in the web-based management interface of multiple Cisco Small Business RV Series routers.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.